Oct 21 05:05:23.012293 kernel: Linux version 6.12.113-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 15.2.1_p20260214 p5) 15.2.1 20260214, GNU ld (Gentoo 2.46.0 p1) 2.46.0) #1 SMP PREEMPT_DYNAMIC Tue Oct 20 22:43:59 -00 2026 Oct 21 05:05:23.012316 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=446da0c27d6975fbe881c1b970b12e9d775115fb1e101ccedfbfe053756b3a81 Oct 21 05:05:23.012323 kernel: BIOS-provided physical RAM map: Oct 21 05:05:23.012327 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 21 05:05:23.012332 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 21 05:05:23.012336 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000044fdfff] usable Oct 21 05:05:23.012341 kernel: BIOS-e820: [mem 0x00000000044fe000-0x00000000048fdfff] reserved Oct 21 05:05:23.012345 kernel: BIOS-e820: [mem 0x00000000048fe000-0x000000003ff1efff] usable Oct 21 05:05:23.012350 kernel: BIOS-e820: [mem 0x000000003ff1f000-0x000000003ffc8fff] reserved Oct 21 05:05:23.012354 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 21 05:05:23.012358 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 21 05:05:23.012362 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 21 05:05:23.012366 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 21 05:05:23.012372 kernel: printk: legacy bootconsole [earlyser0] enabled Oct 21 05:05:23.012377 kernel: NX (Execute Disable) protection: active Oct 21 05:05:23.012381 kernel: APIC: Static calls initialized Oct 21 05:05:23.012385 kernel: efi: EFI v2.7 by Microsoft Oct 21 05:05:23.012391 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff88000 SMBIOS 3.0=0x3ff86000 MEMATTR=0x3ea77018 RNG=0x3ffd2018 Oct 21 05:05:23.012396 kernel: random: crng init done Oct 21 05:05:23.012400 kernel: secureboot: Secure boot disabled Oct 21 05:05:23.012404 kernel: SMBIOS 3.1.0 present. Oct 21 05:05:23.012409 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 04/22/2026 Oct 21 05:05:23.012413 kernel: DMI: Memory slots populated: 2/2 Oct 21 05:05:23.012417 kernel: Hypervisor detected: Microsoft Hyper-V Oct 21 05:05:23.012422 kernel: Hyper-V: privilege flags low 0xae7f, high 0x3b8030, hints 0x9e4e24, misc 0xe0bed7b2 Oct 21 05:05:23.012426 kernel: Hyper-V: Nested features: 0x3e0101 Oct 21 05:05:23.012430 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 21 05:05:23.012434 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 21 05:05:23.012440 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 21 05:05:23.012444 kernel: clocksource: hyperv_clocksource_msr: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 21 05:05:23.012448 kernel: tsc: Detected 2300.000 MHz processor Oct 21 05:05:23.012453 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 21 05:05:23.012458 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 21 05:05:23.012463 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x10000000000 Oct 21 05:05:23.012468 kernel: MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs Oct 21 05:05:23.012473 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 21 05:05:23.012479 kernel: e820: update [mem 0x48000000-0xffffffff] usable ==> reserved Oct 21 05:05:23.012483 kernel: last_pfn = 0x40000 max_arch_pfn = 0x10000000000 Oct 21 05:05:23.012488 kernel: Using GB pages for direct mapping Oct 21 05:05:23.012492 kernel: ACPI: Early table checksum verification disabled Oct 21 05:05:23.012499 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 21 05:05:23.012505 kernel: ACPI: XSDT 0x000000003FFF90E8 00005C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012510 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012514 kernel: ACPI: DSDT 0x000000003FFD6000 01E22B (v02 MSFTVM DSDT01 00000001 INTL 20230628) Oct 21 05:05:23.012519 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 21 05:05:23.012524 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012529 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012535 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012539 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v05 HVLITE HVLITETB 00000000 MSHV 00000000) Oct 21 05:05:23.012544 kernel: ACPI: SRAT 0x000000003FFD4000 0000A0 (v03 HVLITE HVLITETB 00000000 MSHV 00000000) Oct 21 05:05:23.012549 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 21 05:05:23.012553 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 21 05:05:23.012558 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff422a] Oct 21 05:05:23.012563 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 21 05:05:23.012569 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 21 05:05:23.012573 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 21 05:05:23.012578 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 21 05:05:23.012583 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 21 05:05:23.012588 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd409f] Oct 21 05:05:23.012592 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 21 05:05:23.012597 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] Oct 21 05:05:23.012603 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] Oct 21 05:05:23.012608 kernel: NUMA: Node 0 [mem 0x00001000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00001000-0x2bfffffff] Oct 21 05:05:23.012613 kernel: NODE_DATA(0) allocated [mem 0x2bfff8dc0-0x2bfffffff] Oct 21 05:05:23.012617 kernel: Zone ranges: Oct 21 05:05:23.012622 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 21 05:05:23.012627 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 21 05:05:23.012632 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 21 05:05:23.012637 kernel: Device empty Oct 21 05:05:23.012642 kernel: Movable zone start for each node Oct 21 05:05:23.012667 kernel: Early memory node ranges Oct 21 05:05:23.012672 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 21 05:05:23.012677 kernel: node 0: [mem 0x0000000000100000-0x00000000044fdfff] Oct 21 05:05:23.012681 kernel: node 0: [mem 0x00000000048fe000-0x000000003ff1efff] Oct 21 05:05:23.012686 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 21 05:05:23.012691 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 21 05:05:23.012696 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 21 05:05:23.012701 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 21 05:05:23.012706 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 21 05:05:23.012710 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges Oct 21 05:05:23.012715 kernel: On node 0, zone DMA32: 224 pages in unavailable ranges Oct 21 05:05:23.012719 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 21 05:05:23.012724 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 21 05:05:23.012730 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 21 05:05:23.012735 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 21 05:05:23.012739 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 21 05:05:23.012744 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 21 05:05:23.012748 kernel: TSC deadline timer available Oct 21 05:05:23.012753 kernel: CPU topo: Max. logical packages: 1 Oct 21 05:05:23.012758 kernel: CPU topo: Max. logical dies: 1 Oct 21 05:05:23.012763 kernel: CPU topo: Max. dies per package: 1 Oct 21 05:05:23.012768 kernel: CPU topo: Max. threads per core: 2 Oct 21 05:05:23.012773 kernel: CPU topo: Num. cores per package: 1 Oct 21 05:05:23.012777 kernel: CPU topo: Num. threads per package: 2 Oct 21 05:05:23.012782 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs Oct 21 05:05:23.012787 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 21 05:05:23.012791 kernel: Booting paravirtualized kernel on Hyper-V Oct 21 05:05:23.012798 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 21 05:05:23.012803 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 Oct 21 05:05:23.012807 kernel: percpu: Embedded 60 pages/cpu s208408 r8192 d29160 u1048576 Oct 21 05:05:23.012812 kernel: pcpu-alloc: s208408 r8192 d29160 u1048576 alloc=1*2097152 Oct 21 05:05:23.012816 kernel: pcpu-alloc: [0] 0 1 Oct 21 05:05:23.012821 kernel: Hyper-V: PV spinlocks enabled Oct 21 05:05:23.012825 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 21 05:05:23.012832 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=446da0c27d6975fbe881c1b970b12e9d775115fb1e101ccedfbfe053756b3a81 Oct 21 05:05:23.012837 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 21 05:05:23.012842 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 21 05:05:23.012846 kernel: Fallback order for Node 0: 0 Oct 21 05:05:23.012851 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2095807 Oct 21 05:05:23.012855 kernel: Policy zone: Normal Oct 21 05:05:23.012860 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 21 05:05:23.012866 kernel: software IO TLB: area num 2. Oct 21 05:05:23.012871 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 21 05:05:23.012875 kernel: ftrace: allocating 41514 entries in 164 pages Oct 21 05:05:23.012880 kernel: ftrace: allocated 164 pages with 3 groups Oct 21 05:05:23.012884 kernel: Dynamic Preempt: voluntary Oct 21 05:05:23.012889 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 21 05:05:23.012896 kernel: rcu: RCU event tracing is enabled. Oct 21 05:05:23.012906 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 21 05:05:23.012911 kernel: Trampoline variant of Tasks RCU enabled. Oct 21 05:05:23.012917 kernel: Rude variant of Tasks RCU enabled. Oct 21 05:05:23.012922 kernel: Tracing variant of Tasks RCU enabled. Oct 21 05:05:23.012927 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 21 05:05:23.012932 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 21 05:05:23.012937 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 21 05:05:23.012942 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 21 05:05:23.012947 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 21 05:05:23.012953 kernel: Using NULL legacy PIC Oct 21 05:05:23.012958 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 21 05:05:23.012963 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Oct 21 05:05:23.012967 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 21 05:05:23.012974 kernel: Console: colour dummy device 80x25 Oct 21 05:05:23.012979 kernel: printk: legacy console [tty1] enabled Oct 21 05:05:23.012984 kernel: printk: legacy console [ttyS0] enabled Oct 21 05:05:23.012988 kernel: printk: legacy bootconsole [earlyser0] disabled Oct 21 05:05:23.012993 kernel: ACPI: Core revision 20240827 Oct 21 05:05:23.012998 kernel: Failed to register legacy timer interrupt Oct 21 05:05:23.013003 kernel: APIC: Switch to symmetric I/O mode setup Oct 21 05:05:23.013009 kernel: x2apic enabled Oct 21 05:05:23.013014 kernel: APIC: Switched APIC routing to: physical x2apic Oct 21 05:05:23.013019 kernel: Hyper-V: Host Build 10.0.26102.3704-3-0 Oct 21 05:05:23.013024 kernel: Hyper-V: enabling crash_kexec_post_notifiers Oct 21 05:05:23.013029 kernel: Hyper-V: Disabling IBT because of Hyper-V bug Oct 21 05:05:23.013034 kernel: Hyper-V: Using IPI hypercalls Oct 21 05:05:23.013039 kernel: APIC: send_IPI() replaced with hv_send_ipi() Oct 21 05:05:23.013045 kernel: APIC: send_IPI_mask() replaced with hv_send_ipi_mask() Oct 21 05:05:23.013050 kernel: APIC: send_IPI_mask_allbutself() replaced with hv_send_ipi_mask_allbutself() Oct 21 05:05:23.013055 kernel: APIC: send_IPI_allbutself() replaced with hv_send_ipi_allbutself() Oct 21 05:05:23.013060 kernel: APIC: send_IPI_all() replaced with hv_send_ipi_all() Oct 21 05:05:23.013065 kernel: APIC: send_IPI_self() replaced with hv_send_ipi_self() Oct 21 05:05:23.013070 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns Oct 21 05:05:23.013075 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 4600.00 BogoMIPS (lpj=2300000) Oct 21 05:05:23.013081 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 21 05:05:23.013086 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 21 05:05:23.013091 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 21 05:05:23.013096 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 21 05:05:23.013101 kernel: Spectre V2 : Mitigation: Retpolines Oct 21 05:05:23.013105 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Oct 21 05:05:23.013111 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 21 05:05:23.013115 kernel: RETBleed: Vulnerable Oct 21 05:05:23.013120 kernel: Speculative Store Bypass: Vulnerable Oct 21 05:05:23.013126 kernel: active return thunk: its_return_thunk Oct 21 05:05:23.013130 kernel: ITS: Mitigation: Aligned branch/return thunks Oct 21 05:05:23.013135 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 21 05:05:23.013140 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 21 05:05:23.013144 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 21 05:05:23.013149 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 21 05:05:23.013154 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 21 05:05:23.013158 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 21 05:05:23.013163 kernel: x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers' Oct 21 05:05:23.013168 kernel: x86/fpu: Supporting XSAVE feature 0x20000: 'AMX Tile config' Oct 21 05:05:23.013173 kernel: x86/fpu: Supporting XSAVE feature 0x40000: 'AMX Tile data' Oct 21 05:05:23.013178 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 21 05:05:23.013183 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 21 05:05:23.013187 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 21 05:05:23.013192 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 21 05:05:23.013197 kernel: x86/fpu: xstate_offset[11]: 2432, xstate_sizes[11]: 16 Oct 21 05:05:23.013201 kernel: x86/fpu: xstate_offset[17]: 2496, xstate_sizes[17]: 64 Oct 21 05:05:23.013206 kernel: x86/fpu: xstate_offset[18]: 2560, xstate_sizes[18]: 8192 Oct 21 05:05:23.013211 kernel: x86/fpu: Enabled xstate features 0x608e7, context size is 10752 bytes, using 'compacted' format. Oct 21 05:05:23.013216 kernel: Freeing SMP alternatives memory: 36K Oct 21 05:05:23.013220 kernel: pid_max: default: 32768 minimum: 301 Oct 21 05:05:23.013226 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Oct 21 05:05:23.013231 kernel: landlock: Up and running. Oct 21 05:05:23.013236 kernel: SELinux: Initializing. Oct 21 05:05:23.013240 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 21 05:05:23.013245 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 21 05:05:23.013250 kernel: smpboot: CPU0: Intel INTEL(R) XEON(R) PLATINUM 8573C (family: 0x6, model: 0xcf, stepping: 0x2) Oct 21 05:05:23.013255 kernel: Performance Events: unsupported p6 CPU model 207 no PMU driver, software events only. Oct 21 05:05:23.013260 kernel: signal: max sigframe size: 11952 Oct 21 05:05:23.013265 kernel: rcu: Hierarchical SRCU implementation. Oct 21 05:05:23.013271 kernel: rcu: Max phase no-delay instances is 400. Oct 21 05:05:23.013276 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Oct 21 05:05:23.013281 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 21 05:05:23.013286 kernel: smp: Bringing up secondary CPUs ... Oct 21 05:05:23.013290 kernel: smpboot: x86: Booting SMP configuration: Oct 21 05:05:23.013295 kernel: .... node #0, CPUs: #1 Oct 21 05:05:23.013300 kernel: smp: Brought up 1 node, 2 CPUs Oct 21 05:05:23.013305 kernel: smpboot: Total of 2 processors activated (9200.00 BogoMIPS) Oct 21 05:05:23.013311 kernel: Memory: 8058416K/8383228K available (14336K kernel code, 2476K rwdata, 32660K rodata, 16144K init, 1884K bss, 318552K reserved, 0K cma-reserved) Oct 21 05:05:23.013316 kernel: devtmpfs: initialized Oct 21 05:05:23.013321 kernel: x86/mm: Memory block size: 128MB Oct 21 05:05:23.013326 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 21 05:05:23.013331 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 21 05:05:23.013336 kernel: pinctrl core: initialized pinctrl subsystem Oct 21 05:05:23.013341 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 21 05:05:23.013347 kernel: audit: initializing netlink subsys (disabled) Oct 21 05:05:23.013352 kernel: audit: type=2000 audit(1792559115.102:1): state=initialized audit_enabled=0 res=1 Oct 21 05:05:23.013357 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 21 05:05:23.013362 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 21 05:05:23.013367 kernel: cpuidle: using governor menu Oct 21 05:05:23.013372 kernel: efi: Freeing EFI boot services memory: 34952K Oct 21 05:05:23.013377 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 21 05:05:23.013383 kernel: dca service started, version 1.12.1 Oct 21 05:05:23.013388 kernel: e820: reserve RAM buffer [mem 0x044fe000-0x07ffffff] Oct 21 05:05:23.013393 kernel: e820: reserve RAM buffer [mem 0x3ff1f000-0x3fffffff] Oct 21 05:05:23.013397 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 21 05:05:23.013402 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Oct 21 05:05:23.013407 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page Oct 21 05:05:23.013412 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Oct 21 05:05:23.013418 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page Oct 21 05:05:23.013423 kernel: ACPI: Added _OSI(Module Device) Oct 21 05:05:23.013428 kernel: ACPI: Added _OSI(Processor Device) Oct 21 05:05:23.013433 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 21 05:05:23.013438 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 21 05:05:23.013443 kernel: ACPI: Interpreter enabled Oct 21 05:05:23.013448 kernel: ACPI: PM: (supports S0 S5) Oct 21 05:05:23.013454 kernel: ACPI: Using IOAPIC for interrupt routing Oct 21 05:05:23.013459 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 21 05:05:23.013464 kernel: PCI: Ignoring E820 reservations for host bridge windows Oct 21 05:05:23.013469 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 21 05:05:23.013473 kernel: iommu: Default domain type: Translated Oct 21 05:05:23.013478 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 21 05:05:23.013483 kernel: efivars: Registered efivars operations Oct 21 05:05:23.013489 kernel: PCI: Using ACPI for IRQ routing Oct 21 05:05:23.013494 kernel: PCI: System does not support PCI Oct 21 05:05:23.013499 kernel: vgaarb: loaded Oct 21 05:05:23.013504 kernel: clocksource: Switched to clocksource tsc-early Oct 21 05:05:23.013509 kernel: VFS: Disk quotas dquot_6.6.0 Oct 21 05:05:23.013513 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 21 05:05:23.013518 kernel: pnp: PnP ACPI init Oct 21 05:05:23.013524 kernel: pnp: PnP ACPI: found 3 devices Oct 21 05:05:23.013529 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 21 05:05:23.013534 kernel: NET: Registered PF_INET protocol family Oct 21 05:05:23.013539 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 21 05:05:23.013544 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 21 05:05:23.013549 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 21 05:05:23.013554 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 21 05:05:23.013560 kernel: TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear) Oct 21 05:05:23.013565 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 21 05:05:23.013570 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 21 05:05:23.013575 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 21 05:05:23.013580 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 21 05:05:23.013585 kernel: NET: Registered PF_XDP protocol family Oct 21 05:05:23.013590 kernel: PCI: CLS 0 bytes, default 64 Oct 21 05:05:23.013596 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 21 05:05:23.013601 kernel: software IO TLB: mapped [mem 0x000000003a98b000-0x000000003e98b000] (64MB) Oct 21 05:05:23.013606 kernel: RAPL PMU: API unit is 2^-32 Joules, 1 fixed counters, 10737418240 ms ovfl timer Oct 21 05:05:23.013611 kernel: RAPL PMU: hw unit of domain psys 2^-0 Joules Oct 21 05:05:23.013616 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns Oct 21 05:05:23.013621 kernel: clocksource: Switched to clocksource tsc Oct 21 05:05:23.013626 kernel: Initialise system trusted keyrings Oct 21 05:05:23.013632 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 21 05:05:23.013637 kernel: Key type asymmetric registered Oct 21 05:05:23.013642 kernel: Asymmetric key parser 'x509' registered Oct 21 05:05:23.013656 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) Oct 21 05:05:23.013683 kernel: io scheduler mq-deadline registered Oct 21 05:05:23.013689 kernel: io scheduler kyber registered Oct 21 05:05:23.013694 kernel: io scheduler bfq registered Oct 21 05:05:23.013699 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 21 05:05:23.013706 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 21 05:05:23.013712 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 21 05:05:23.013717 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 21 05:05:23.013722 kernel: serial8250: ttyS2 at I/O 0x3e8 (irq = 4, base_baud = 115200) is a 16550A Oct 21 05:05:23.013727 kernel: ACPI: bus type drm_connector registered Oct 21 05:05:23.013732 kernel: i8042: PNP: No PS/2 controller found. Oct 21 05:05:23.013864 kernel: rtc_cmos 00:02: registered as rtc0 Oct 21 05:05:23.013942 kernel: rtc_cmos 00:02: setting system clock to 2026-10-21T05:05:16 UTC (1792559116) Oct 21 05:05:23.014014 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 21 05:05:23.014020 kernel: intel_pstate: Intel P-state driver initializing Oct 21 05:05:23.014026 kernel: efifb: probing for efifb Oct 21 05:05:23.014031 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 21 05:05:23.014038 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 21 05:05:23.014043 kernel: efifb: scrolling: redraw Oct 21 05:05:23.014048 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 21 05:05:23.014053 kernel: Console: switching to colour frame buffer device 128x48 Oct 21 05:05:23.014058 kernel: fb0: EFI VGA frame buffer device Oct 21 05:05:23.014063 kernel: pstore: Using crash dump compression: deflate Oct 21 05:05:23.014068 kernel: pstore: Registered efi_pstore as persistent store backend Oct 21 05:05:23.014073 kernel: NET: Registered PF_INET6 protocol family Oct 21 05:05:23.014079 kernel: Segment Routing with IPv6 Oct 21 05:05:23.014084 kernel: In-situ OAM (IOAM) with IPv6 Oct 21 05:05:23.014090 kernel: NET: Registered PF_PACKET protocol family Oct 21 05:05:23.014094 kernel: Key type dns_resolver registered Oct 21 05:05:23.014099 kernel: IPI shorthand broadcast: enabled Oct 21 05:05:23.014104 kernel: sched_clock: Marking stable (1850003279, 93098746)->(2209823745, -266721720) Oct 21 05:05:23.014110 kernel: registered taskstats version 1 Oct 21 05:05:23.014116 kernel: Loading compiled-in X.509 certificates Oct 21 05:05:23.014121 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.113-flatcar: 66785af6fc4054e728113cb68ed69f0138ffc51a' Oct 21 05:05:23.014126 kernel: Demotion targets for Node 0: null Oct 21 05:05:23.014131 kernel: Key type .fscrypt registered Oct 21 05:05:23.014136 kernel: Key type fscrypt-provisioning registered Oct 21 05:05:23.014141 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 21 05:05:23.014146 kernel: ima: Allocated hash algorithm: sha1 Oct 21 05:05:23.014152 kernel: ima: No architecture policies found Oct 21 05:05:23.014157 kernel: clk: Disabling unused clocks Oct 21 05:05:23.014162 kernel: Freeing unused kernel image (initmem) memory: 16144K Oct 21 05:05:23.014167 kernel: Write protecting the kernel read-only data: 47104k Oct 21 05:05:23.014172 kernel: Freeing unused kernel image (rodata/data gap) memory: 108K Oct 21 05:05:23.014178 kernel: Run /init as init process Oct 21 05:05:23.014183 kernel: with arguments: Oct 21 05:05:23.014189 kernel: /init Oct 21 05:05:23.014194 kernel: with environment: Oct 21 05:05:23.014199 kernel: HOME=/ Oct 21 05:05:23.014203 kernel: TERM=linux Oct 21 05:05:23.014209 kernel: hv_vmbus: hv_mmio=[mem 0x40000000-0xfed3ffff],[mem 0xfc0000000-0xfffffffff] fb=[mem 0x40000000-0x47ffffff] Oct 21 05:05:23.014214 kernel: hv_vmbus: Vmbus version:5.3 Oct 21 05:05:23.014218 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 21 05:05:23.014223 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 21 05:05:23.014230 kernel: PTP clock support registered Oct 21 05:05:23.014235 kernel: SCSI subsystem initialized Oct 21 05:05:23.014240 kernel: hv_utils: Registering HyperV Utility Driver Oct 21 05:05:23.014245 kernel: hv_vmbus: registering driver hv_utils Oct 21 05:05:23.014250 kernel: hv_utils: Shutdown IC version 3.2 Oct 21 05:05:23.014255 kernel: hv_utils: Heartbeat IC version 3.0 Oct 21 05:05:23.014260 kernel: hv_utils: TimeSync IC version 4.0 Oct 21 05:05:23.014266 kernel: hv_vmbus: registering driver hv_pci Oct 21 05:05:23.014374 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI VMBus probing: Using version 0x10004 Oct 21 05:05:23.014460 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI host bridge to bus c05b:00 Oct 21 05:05:23.014562 kernel: pci_bus c05b:00: root bus resource [mem 0xfc0000000-0xfc007ffff window] Oct 21 05:05:23.014668 kernel: pci_bus c05b:00: No busn resource found for root bus, will use [bus 00-ff] Oct 21 05:05:23.014783 kernel: pci c05b:00:00.0: [1414:00a9] type 00 class 0x010802 PCIe Endpoint Oct 21 05:05:23.014882 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit] Oct 21 05:05:23.014972 kernel: pci_bus c05b:00: busn_res: [bus 00-ff] end is updated to 00 Oct 21 05:05:23.015068 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit]: assigned Oct 21 05:05:23.015074 kernel: hv_vmbus: registering driver hv_storvsc Oct 21 05:05:23.015172 kernel: scsi host0: storvsc_host_t Oct 21 05:05:23.015282 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 Oct 21 05:05:23.015289 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 21 05:05:23.015295 kernel: hv_vmbus: registering driver hid_hyperv Oct 21 05:05:23.015300 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Oct 21 05:05:23.015385 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 21 05:05:23.015394 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 21 05:05:23.015399 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Oct 21 05:05:23.015491 kernel: nvme nvme0: pci function c05b:00:00.0 Oct 21 05:05:23.015589 kernel: nvme c05b:00:00.0: enabling device (0000 -> 0002) Oct 21 05:05:23.015682 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 21 05:05:23.015690 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 21 05:05:23.015786 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 21 05:05:23.015792 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 21 05:05:23.015887 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 21 05:05:23.015894 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 21 05:05:23.015909 kernel: device-mapper: uevent: version 1.0.3 Oct 21 05:05:23.015916 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Oct 21 05:05:23.015922 kernel: device-mapper: verity: sha256 using shash "sha256-generic" Oct 21 05:05:23.015928 kernel: raid6: avx512x4 gen() 46948 MB/s Oct 21 05:05:23.015933 kernel: raid6: avx512x2 gen() 45540 MB/s Oct 21 05:05:23.015938 kernel: raid6: avx512x1 gen() 29607 MB/s Oct 21 05:05:23.015944 kernel: raid6: avx2x4 gen() 41556 MB/s Oct 21 05:05:23.015949 kernel: raid6: avx2x2 gen() 44078 MB/s Oct 21 05:05:23.015954 kernel: raid6: avx2x1 gen() 31038 MB/s Oct 21 05:05:23.015961 kernel: raid6: using algorithm avx512x4 gen() 46948 MB/s Oct 21 05:05:23.015966 kernel: raid6: .... xor() 7463 MB/s, rmw enabled Oct 21 05:05:23.015971 kernel: raid6: using avx512x2 recovery algorithm Oct 21 05:05:23.015976 kernel: xor: automatically using best checksumming function avx Oct 21 05:05:23.015982 kernel: Btrfs loaded, zoned=no, fsverity=no Oct 21 05:05:23.015987 kernel: BTRFS: device fsid db3e5099-a623-42b2-94ae-735012c46c74 devid 1 transid 44 /dev/mapper/usr (254:0) scanned by mount (1049) Oct 21 05:05:23.015992 kernel: BTRFS info (device dm-0): first mount of filesystem db3e5099-a623-42b2-94ae-735012c46c74 Oct 21 05:05:23.015998 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm Oct 21 05:05:23.016004 kernel: BTRFS info (device dm-0 state E): enabling ssd optimizations Oct 21 05:05:23.016009 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time Oct 21 05:05:23.016015 kernel: BTRFS info (device dm-0 state E): enabling free space tree Oct 21 05:05:23.016020 kernel: loop: module loaded Oct 21 05:05:23.016025 kernel: loop0: detected capacity change from 0 to 109736 Oct 21 05:05:23.016030 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 21 05:05:23.016036 systemd[1]: Successfully made /usr/ read-only. Oct 21 05:05:23.016045 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Oct 21 05:05:23.016051 systemd[1]: Detected virtualization microsoft. Oct 21 05:05:23.016057 systemd[1]: Detected architecture x86-64. Oct 21 05:05:23.016062 systemd[1]: Running in initrd. Oct 21 05:05:23.016067 systemd[1]: Initializing machine ID from random generator. Oct 21 05:05:23.016074 systemd[1]: No hostname configured, using default hostname. Oct 21 05:05:23.016080 systemd[1]: Hostname set to . Oct 21 05:05:23.016085 systemd[1]: Queued start job for default target initrd.target. Oct 21 05:05:23.016091 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 21 05:05:23.016099 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 21 05:05:23.016105 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Oct 21 05:05:23.016110 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Oct 21 05:05:23.016116 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Oct 21 05:05:23.016122 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Oct 21 05:05:23.016128 systemd[1]: Expecting device dev-mapper-usr.device - /dev/mapper/usr... Oct 21 05:05:23.016135 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 21 05:05:23.016140 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Oct 21 05:05:23.016146 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Oct 21 05:05:23.016151 systemd[1]: Reached target paths.target - Path Units. Oct 21 05:05:23.016157 systemd[1]: Reached target slices.target - Slice Units. Oct 21 05:05:23.016163 systemd[1]: Reached target swap.target - Swaps. Oct 21 05:05:23.016168 systemd[1]: Reached target timers.target - Timer Units. Oct 21 05:05:23.016174 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Oct 21 05:05:23.016180 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Oct 21 05:05:23.016186 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Oct 21 05:05:23.016191 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Oct 21 05:05:23.016197 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Oct 21 05:05:23.016202 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Oct 21 05:05:23.016209 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 21 05:05:23.016215 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Oct 21 05:05:23.016221 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Oct 21 05:05:23.016226 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Oct 21 05:05:23.016232 systemd[1]: Reached target sockets.target - Socket Units. Oct 21 05:05:23.016238 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments skipped, no trigger condition checks were met. Oct 21 05:05:23.016244 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Oct 21 05:05:23.016250 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Oct 21 05:05:23.016256 systemd[1]: Finished network-cleanup.service - Network Cleanup. Oct 21 05:05:23.016262 systemd[1]: systemd-battery-check.service - Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply Oct 21 05:05:23.016268 systemd[1]: Starting systemd-journald.service - Journal Service... Oct 21 05:05:23.016274 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Oct 21 05:05:23.016280 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 21 05:05:23.016286 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Oct 21 05:05:23.016292 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Oct 21 05:05:23.016298 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Oct 21 05:05:23.016318 systemd-journald[1158]: Collecting audit messages is enabled. Oct 21 05:05:23.016336 systemd-journald[1158]: Journal started Oct 21 05:05:23.016350 systemd-journald[1158]: Runtime Journal (/run/log/journal/3b4fb72595c54a0daf674044bbdeb4d6) is 8M, max 158.5M, 150.5M free. Oct 21 05:05:22.990766 systemd-modules-load[1161]: Using 2 probe threads Oct 21 05:05:23.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.019450 systemd[1]: Started systemd-journald.service - Journal Service. Oct 21 05:05:23.019919 kernel: audit: type=1130 audit(1792559123.017:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.021744 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Oct 21 05:05:23.064678 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 21 05:05:23.069298 systemd-modules-load[1161]: Inserted module 'br_netfilter' Oct 21 05:05:23.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.074540 kernel: Bridge firewalling registered Oct 21 05:05:23.069829 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Oct 21 05:05:23.077730 kernel: audit: type=1130 audit(1792559123.069:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.075134 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Oct 21 05:05:23.104316 systemd-tmpfiles[1167]: /usr/lib/tmpfiles.d/systemd.conf:30: Duplicate line for path "/var/lib/systemd", ignoring. Oct 21 05:05:23.104383 systemd-tmpfiles[1167]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Oct 21 05:05:23.107080 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 21 05:05:23.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.111448 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Oct 21 05:05:23.112092 kernel: audit: type=1130 audit(1792559123.106:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.112267 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 21 05:05:23.112740 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Oct 21 05:05:23.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.115754 kernel: audit: type=1130 audit(1792559123.112:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.117164 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Oct 21 05:05:23.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.123467 kernel: audit: type=1131 audit(1792559123.112:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.115000 audit: BPF prog-id=5 op=LOAD Oct 21 05:05:23.129664 kernel: audit: type=1334 audit(1792559123.115:7): prog-id=5 op=LOAD Oct 21 05:05:23.156302 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 21 05:05:23.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.160871 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 21 05:05:23.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.163892 kernel: audit: type=1130 audit(1792559123.157:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.163914 kernel: audit: type=1130 audit(1792559123.160:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.212025 systemd-vconsole-setup[1162]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 21 05:05:23.215434 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:23.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.220761 kernel: audit: type=1130 audit(1792559123.216:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.222813 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Oct 21 05:05:23.232694 systemd-resolved[1177]: Positive Trust Anchors: Oct 21 05:05:23.232706 systemd-resolved[1177]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 21 05:05:23.232709 systemd-resolved[1177]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Oct 21 05:05:23.232738 systemd-resolved[1177]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Oct 21 05:05:23.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.265730 kernel: audit: type=1130 audit(1792559123.254:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.253088 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Oct 21 05:05:23.271857 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Oct 21 05:05:23.287692 systemd-resolved[1177]: Defaulting to hostname 'linux'. Oct 21 05:05:23.290426 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Oct 21 05:05:23.293355 dracut-cmdline[1192]: dracut-110 Oct 21 05:05:23.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.297601 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Oct 21 05:05:23.300776 dracut-cmdline[1192]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=446da0c27d6975fbe881c1b970b12e9d775115fb1e101ccedfbfe053756b3a81 Oct 21 05:05:23.417664 kernel: Loading iSCSI transport class v2.0-870. Oct 21 05:05:23.533680 kernel: iscsi: registered transport (tcp) Oct 21 05:05:23.581736 kernel: iscsi: registered transport (qla4xxx) Oct 21 05:05:23.581774 kernel: QLogic iSCSI HBA Driver Oct 21 05:05:23.628057 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Oct 21 05:05:23.637545 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 21 05:05:23.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.641565 systemd[1]: Reached target network-pre.target - Preparation for Network. Oct 21 05:05:23.673260 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Oct 21 05:05:23.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.676354 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Oct 21 05:05:23.681051 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Oct 21 05:05:23.703204 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Oct 21 05:05:23.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.706000 audit: BPF prog-id=6 op=LOAD Oct 21 05:05:23.706000 audit: BPF prog-id=7 op=LOAD Oct 21 05:05:23.707793 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 21 05:05:23.775543 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Oct 21 05:05:23.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.944679 systemd-udevd[1430]: Using default interface naming scheme 'v260'. Oct 21 05:05:23.960002 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 21 05:05:23.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:23.967234 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Oct 21 05:05:23.978664 systemd[1]: Starting systemd-networkd.service - Network Management... Oct 21 05:05:23.977000 audit: BPF prog-id=8 op=LOAD Oct 21 05:05:23.992044 dracut-pre-trigger[1529]: rd.md=0: removing MD RAID activation Oct 21 05:05:24.019145 systemd-networkd[1543]: Failed to open nftables netlink socket. IPMasquerade= and NFTSet= settings will not be applied. Ignoring: Protocol not supported Oct 21 05:05:24.019862 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Oct 21 05:05:24.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:24.029759 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Oct 21 05:05:24.031848 systemd-networkd[1543]: lo: Link UP Oct 21 05:05:24.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:24.031856 systemd-networkd[1543]: lo: Gained carrier Oct 21 05:05:24.033089 systemd[1]: Started systemd-networkd.service - Network Management. Oct 21 05:05:24.033316 systemd[1]: Reached target network.target - Network. Oct 21 05:05:24.087743 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Oct 21 05:05:24.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:24.091760 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Oct 21 05:05:24.158675 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#295 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Oct 21 05:05:24.228089 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 21 05:05:24.228183 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:24.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:24.236238 kernel: hv_vmbus: registering driver hv_netvsc Oct 21 05:05:24.236221 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Oct 21 05:05:24.241170 kernel: hv_netvsc f8615163-0000-1000-2000-7c1e522dce99 (unnamed net_device) (uninitialized): VF slot 1 added Oct 21 05:05:24.247789 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 21 05:05:24.250369 systemd-networkd[1543]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 21 05:05:24.250374 systemd-networkd[1543]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 21 05:05:24.251497 systemd-networkd[1543]: eth0: Link UP Oct 21 05:05:24.269375 kernel: cryptd: max_cpu_qlen set to 1000 Oct 21 05:05:24.251621 systemd-networkd[1543]: eth0: Gained carrier Oct 21 05:05:24.251632 systemd-networkd[1543]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 21 05:05:24.267759 systemd-networkd[1543]: eth0: DHCPv4 address 10.0.0.11/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 21 05:05:24.294700 systemd-vconsole-setup[1621]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 21 05:05:24.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:24.295475 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:24.303592 kernel: AES CTR mode by8 optimization enabled Oct 21 05:05:24.499681 kernel: nvme nvme0: using unchecked data buffer Oct 21 05:05:25.252998 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI VMBus probing: Using version 0x10004 Oct 21 05:05:25.253266 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI host bridge to bus 7870:00 Oct 21 05:05:25.256021 kernel: pci_bus 7870:00: root bus resource [mem 0xfc2000000-0xfc4007fff window] Oct 21 05:05:25.258046 kernel: pci_bus 7870:00: No busn resource found for root bus, will use [bus 00-ff] Oct 21 05:05:25.262775 kernel: pci 7870:00:00.0: [1414:00ba] type 00 class 0x020000 PCIe Endpoint Oct 21 05:05:25.265864 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref] Oct 21 05:05:25.270715 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref] Oct 21 05:05:25.270776 kernel: pci 7870:00:00.0: enabling Extended Tags Oct 21 05:05:25.286231 kernel: pci_bus 7870:00: busn_res: [bus 00-ff] end is updated to 00 Oct 21 05:05:25.286481 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref]: assigned Oct 21 05:05:25.289859 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref]: assigned Oct 21 05:05:25.305772 systemd-networkd[1543]: eth0: Gained IPv6LL Oct 21 05:05:25.385514 kernel: mana 7870:00:00.0: enabling device (0000 -> 0002) Oct 21 05:05:25.393660 kernel: mana 7870:00:00.0: Microsoft Azure Network Adapter protocol version: 0.1.1 Oct 21 05:05:25.396989 kernel: hv_netvsc f8615163-0000-1000-2000-7c1e522dce99 eth0: VF registering: eth1 Oct 21 05:05:25.397145 kernel: mana 7870:00:00.0 eth1: joined to eth0 Oct 21 05:05:25.402508 systemd-networkd[1543]: eth1: Interface name change detected, renamed to enP30832s1. Oct 21 05:05:25.405081 kernel: mana 7870:00:00.0 enP30832s1: renamed from eth1 Oct 21 05:05:25.498662 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 Oct 21 05:05:25.502441 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Oct 21 05:05:25.502721 kernel: hv_netvsc f8615163-0000-1000-2000-7c1e522dce99 eth0: Data path switched to VF: enP30832s1 Oct 21 05:05:25.502971 systemd-networkd[1543]: enP30832s1: Link UP Oct 21 05:05:25.503902 systemd-networkd[1543]: enP30832s1: Gained carrier Oct 21 05:05:25.754386 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - MSFT NVMe Accelerator v1.0 EFI-SYSTEM. Oct 21 05:05:25.782772 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - MSFT NVMe Accelerator v1.0 ROOT. Oct 21 05:05:25.804325 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - MSFT NVMe Accelerator v1.0 USR-A. Oct 21 05:05:25.817011 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. Oct 21 05:05:25.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:25.817606 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Oct 21 05:05:25.818190 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Oct 21 05:05:25.818286 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 21 05:05:25.818450 systemd[1]: Reached target remote-fs.target - Remote File Systems. Oct 21 05:05:25.819824 systemd[1]: Mounting oem.mount - /oem... Oct 21 05:05:25.835016 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Oct 21 05:05:25.857267 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Oct 21 05:05:25.862717 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1732) Oct 21 05:05:25.865123 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem 48bc1264-4b9d-45c8-9716-87b1aa730a9d Oct 21 05:05:25.865206 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 21 05:05:25.977221 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 21 05:05:25.977260 kernel: BTRFS info (device nvme0n1p6): turning on async discard Oct 21 05:05:25.978841 kernel: BTRFS info (device nvme0n1p6): enabling free space tree Oct 21 05:05:25.989636 systemd[1]: Mounted oem.mount - /oem. Oct 21 05:05:25.992126 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Oct 21 05:05:26.011065 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Oct 21 05:05:26.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:27.135751 disk-uuid[1737]: Warning: The kernel is still using the old partition table. Oct 21 05:05:27.135751 disk-uuid[1737]: The new table will be used at the next reboot or after you Oct 21 05:05:27.135751 disk-uuid[1737]: run partprobe(8) or kpartx(8) Oct 21 05:05:27.135751 disk-uuid[1737]: The operation has completed successfully. Oct 21 05:05:27.354266 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 21 05:05:27.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:27.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:27.354369 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Oct 21 05:05:27.360388 systemd[1]: Mounting boot.mount - Boot partition... Oct 21 05:05:27.565494 systemd[1]: Mounted boot.mount - Boot partition. Oct 21 05:05:28.605501 ignition[1757]: Ignition 2.24.0 Oct 21 05:05:28.605513 ignition[1757]: Stage: fetch-offline Oct 21 05:05:28.605931 ignition[1757]: no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:28.605940 ignition[1757]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:28.609829 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Oct 21 05:05:28.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.606373 ignition[1757]: parsed url from cmdline: "" Oct 21 05:05:28.614437 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Oct 21 05:05:28.624808 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 21 05:05:28.606377 ignition[1757]: no config URL provided Oct 21 05:05:28.626757 kernel: audit: type=1130 audit(1792559128.612:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.606383 ignition[1757]: reading system config file "/usr/lib/ignition/user.ign" Oct 21 05:05:28.606415 ignition[1757]: no config at "/usr/lib/ignition/user.ign" Oct 21 05:05:28.606420 ignition[1757]: failed to fetch config: resource requires networking Oct 21 05:05:28.606701 ignition[1757]: Ignition finished successfully Oct 21 05:05:28.642358 ignition[1796]: Ignition 2.24.0 Oct 21 05:05:28.642367 ignition[1796]: Stage: fetch Oct 21 05:05:28.642552 ignition[1796]: no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:28.642558 ignition[1796]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:28.642619 ignition[1796]: parsed url from cmdline: "" Oct 21 05:05:28.642621 ignition[1796]: no config URL provided Oct 21 05:05:28.642625 ignition[1796]: reading system config file "/usr/lib/ignition/user.ign" Oct 21 05:05:28.642632 ignition[1796]: no config at "/usr/lib/ignition/user.ign" Oct 21 05:05:28.642664 ignition[1796]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 21 05:05:28.709805 ignition[1796]: GET result: OK Oct 21 05:05:28.709842 ignition[1796]: config has been read from IMDS userdata Oct 21 05:05:28.709851 ignition[1796]: parsing config with SHA512: 69e980487e5026b1322461fc0c8083a8fb6886df205a7498b821307126b06147b71c9a7c9ac2cb893921d1a02dfa4d4e29b182364253b8f029e0c4dc03430055 Oct 21 05:05:28.716342 unknown[1796]: fetched base config from "system" Oct 21 05:05:28.716351 unknown[1796]: fetched base config from "system" Oct 21 05:05:28.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.716508 ignition[1796]: fetch: fetch complete Oct 21 05:05:28.716355 unknown[1796]: fetched user config from "azure" Oct 21 05:05:28.734689 kernel: audit: type=1130 audit(1792559128.723:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.716512 ignition[1796]: fetch: fetch passed Oct 21 05:05:28.718779 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Oct 21 05:05:28.716544 ignition[1796]: Ignition finished successfully Oct 21 05:05:28.724363 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Oct 21 05:05:28.751101 ignition[1802]: Ignition 2.24.0 Oct 21 05:05:28.751112 ignition[1802]: Stage: kargs Oct 21 05:05:28.752850 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Oct 21 05:05:28.751300 ignition[1802]: no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:28.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.751306 ignition[1802]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:28.757734 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Oct 21 05:05:28.766439 kernel: audit: type=1130 audit(1792559128.755:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.751839 ignition[1802]: kargs: kargs passed Oct 21 05:05:28.751870 ignition[1802]: Ignition finished successfully Oct 21 05:05:28.796097 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 21 05:05:28.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.796184 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Oct 21 05:05:28.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.797521 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 21 05:05:28.813760 kernel: audit: type=1131 audit(1792559128.796:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.797591 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Oct 21 05:05:28.815195 kernel: audit: type=1131 audit(1792559128.797:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.798074 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 21 05:05:28.819545 kernel: audit: type=1131 audit(1792559128.797:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.798161 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Oct 21 05:05:28.821290 kernel: BTRFS info (device nvme0n1p6): last unmount of filesystem 48bc1264-4b9d-45c8-9716-87b1aa730a9d Oct 21 05:05:28.799760 systemd[1]: Unmounting oem.mount - /oem... Oct 21 05:05:28.822711 systemd[1]: oem.mount: Deactivated successfully. Oct 21 05:05:28.823661 systemd[1]: Unmounted oem.mount - /oem. Oct 21 05:05:28.843119 ignition[1812]: Ignition 2.24.0 Oct 21 05:05:28.843130 ignition[1812]: Stage: disks Oct 21 05:05:28.844985 systemd[1]: Finished ignition-disks.service - Ignition (disks). Oct 21 05:05:28.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.843318 ignition[1812]: no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:28.846700 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Oct 21 05:05:28.861701 kernel: audit: type=1130 audit(1792559128.845:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:28.843324 ignition[1812]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:28.850567 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Oct 21 05:05:28.843816 ignition[1812]: disks: disks passed Oct 21 05:05:28.850596 systemd[1]: Reached target local-fs.target - Local File Systems. Oct 21 05:05:28.843846 ignition[1812]: Ignition finished successfully Oct 21 05:05:28.850864 systemd[1]: Reached target sysinit.target - System Initialization. Oct 21 05:05:28.850885 systemd[1]: Reached target basic.target - Basic System. Oct 21 05:05:28.852776 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Oct 21 05:05:29.172628 systemd-fsck[1821]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks Oct 21 05:05:29.177946 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Oct 21 05:05:29.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:29.183707 systemd[1]: Mounting sysroot.mount - /sysroot... Oct 21 05:05:29.187714 kernel: audit: type=1130 audit(1792559129.181:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:29.652724 kernel: EXT4-fs (nvme0n1p9): mounted filesystem e5c1b2ba-645b-4e83-8187-6cc8eff8c869 r/w with ordered data mode. Quota mode: none. Oct 21 05:05:29.653285 systemd[1]: Mounted sysroot.mount - /sysroot. Oct 21 05:05:29.655824 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Oct 21 05:05:29.673615 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Oct 21 05:05:29.678764 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... Oct 21 05:05:29.683233 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition skipped, unmet condition check ConditionPathIsReadWrite=!/sysroot Oct 21 05:05:29.683273 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Oct 21 05:05:29.691704 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Oct 21 05:05:29.694748 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Oct 21 05:05:30.675758 systemd-tmpfiles[1851]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:1: Duplicate line for path "/sysroot/var", ignoring. Oct 21 05:05:30.675797 systemd-tmpfiles[1851]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:7: Duplicate line for path "/sysroot/var/empty", ignoring. Oct 21 05:05:30.675898 systemd-tmpfiles[1851]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:28: Duplicate line for path "/sysroot/var/log", ignoring. Oct 21 05:05:31.845274 coreos-metadata[1831]: Oct 21 05:05:31.845 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 21 05:05:31.847841 coreos-metadata[1831]: Oct 21 05:05:31.847 INFO Fetch successful Oct 21 05:05:31.849096 coreos-metadata[1831]: Oct 21 05:05:31.849 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 21 05:05:31.853852 coreos-metadata[1831]: Oct 21 05:05:31.853 INFO Fetch successful Oct 21 05:05:31.855704 coreos-metadata[1831]: Oct 21 05:05:31.855 INFO wrote hostname ci-4757.2.2-a-365c1c1670 to /sysroot/etc/hostname Oct 21 05:05:31.858204 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Oct 21 05:05:31.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:31.865711 kernel: audit: type=1130 audit(1792559131.860:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:32.611668 kernel: loop1: detected capacity change from 0 to 44360 Oct 21 05:05:32.719997 kernel: loop1: p1 p2 p3 Oct 21 05:05:33.243205 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.243266 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:33.245889 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:33.247039 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:33.247494 systemd-confext[1910]: device-mapper: reload ioctl on loop1p1-14-verity (254:1) failed: Invalid argument Oct 21 05:05:33.407668 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.503694 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Oct 21 05:05:33.520666 kernel: loop2: detected capacity change from 0 to 44360 Oct 21 05:05:33.528663 kernel: loop2: p1 p2 p3 Oct 21 05:05:33.534994 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.535023 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:33.537384 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:33.537412 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:33.538847 (sd-merge)[1924]: device-mapper: reload ioctl on loop2p1-18-verity (254:1) failed: Invalid argument Oct 21 05:05:33.545671 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.560336 (sd-merge)[1924]: Using extensions '00-flatcar-default.raw'. Oct 21 05:05:33.561261 (sd-merge)[1924]: Merged extensions into '/sysroot/etc'. Oct 21 05:05:33.567735 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Oct 21 05:05:33.567749 initrd-setup-root[1931]: /etc 00-flatcar-default Wed 2026-10-21 05:05:23 UTC Oct 21 05:05:33.566681 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Oct 21 05:05:33.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.574931 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Oct 21 05:05:33.579729 kernel: audit: type=1130 audit(1792559133.571:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.611107 ignition[1935]: INFO : Ignition 2.24.0 Oct 21 05:05:33.611107 ignition[1935]: INFO : Stage: mount Oct 21 05:05:33.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.618565 kernel: audit: type=1130 audit(1792559133.614:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.618588 ignition[1935]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:33.618588 ignition[1935]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:33.618588 ignition[1935]: INFO : mount: mount passed Oct 21 05:05:33.618588 ignition[1935]: INFO : Ignition finished successfully Oct 21 05:05:33.613291 systemd[1]: Finished ignition-mount.service - Ignition (mount). Oct 21 05:05:33.619745 systemd[1]: Starting ignition-files.service - Ignition (files)... Oct 21 05:05:33.640337 systemd[1]: Mounting oem.mount - /oem... Oct 21 05:05:33.652664 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1943) Oct 21 05:05:33.652693 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem 48bc1264-4b9d-45c8-9716-87b1aa730a9d Oct 21 05:05:33.654935 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 21 05:05:33.660070 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 21 05:05:33.660106 kernel: BTRFS info (device nvme0n1p6): turning on async discard Oct 21 05:05:33.661239 kernel: BTRFS info (device nvme0n1p6): enabling free space tree Oct 21 05:05:33.663212 systemd[1]: Mounted oem.mount - /oem. Oct 21 05:05:33.665816 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Oct 21 05:05:33.676945 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Oct 21 05:05:33.698099 ignition[1961]: INFO : Ignition 2.24.0 Oct 21 05:05:33.698099 ignition[1961]: INFO : Stage: files Oct 21 05:05:33.700926 ignition[1961]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:33.700926 ignition[1961]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:33.700926 ignition[1961]: DEBUG : files: compiled without relabeling support, skipping Oct 21 05:05:33.700926 ignition[1961]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 21 05:05:33.700926 ignition[1961]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 21 05:05:33.710678 ignition[1961]: INFO : files: op(4): [started] processing unit "etcd-member.service" Oct 21 05:05:33.701561 unknown[1961]: wrote ssh authorized keys file for user: core Oct 21 05:05:33.738768 ignition[1961]: INFO : files: op(4): op(5): [started] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: op(4): op(5): [finished] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: op(4): [finished] processing unit "etcd-member.service" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: op(6): [started] setting preset to enabled for "etcd-member.service" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: op(6): [finished] setting preset to enabled for "etcd-member.service" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: createResultFile: createFiles: op(7): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: createResultFile: createFiles: op(7): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 21 05:05:33.741683 ignition[1961]: INFO : files: files passed Oct 21 05:05:33.741683 ignition[1961]: INFO : Ignition finished successfully Oct 21 05:05:33.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.766616 kernel: audit: type=1130 audit(1792559133.747:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.744230 systemd[1]: Finished ignition-files.service - Ignition (files). Oct 21 05:05:33.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.752334 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Oct 21 05:05:33.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.776874 kernel: audit: type=1130 audit(1792559133.767:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.755718 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Oct 21 05:05:33.778958 kernel: audit: type=1131 audit(1792559133.767:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:33.764697 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 21 05:05:33.764784 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Oct 21 05:05:33.788665 initrd-setup-root-after-ignition[1995]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 21 05:05:33.788665 initrd-setup-root-after-ignition[1995]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Oct 21 05:05:33.794549 initrd-setup-root-after-ignition[1999]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 21 05:05:33.797698 kernel: loop3: detected capacity change from 0 to 44360 Oct 21 05:05:33.801667 kernel: loop3: p1 p2 p3 Oct 21 05:05:33.809666 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.813661 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:33.813691 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:33.813701 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:33.815145 systemd-confext[2001]: device-mapper: reload ioctl on loop3p1-21-verity (254:2) failed: Invalid argument Oct 21 05:05:33.820801 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.834672 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Oct 21 05:05:33.858663 kernel: loop4: detected capacity change from 0 to 44360 Oct 21 05:05:33.865673 kernel: loop4: p1 p2 p3 Oct 21 05:05:33.872854 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.872883 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:33.872895 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:33.874728 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:33.875204 (sd-merge)[2010]: device-mapper: reload ioctl on loop4p1-25-verity (254:2) failed: Invalid argument Oct 21 05:05:33.878551 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:33.892716 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Oct 21 05:05:33.892736 (sd-merge)[2010]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 21 05:05:33.945668 kernel: loop4: detected capacity change from 0 to 137048 Oct 21 05:05:33.997661 kernel: loop4: p1 p2 p3 Oct 21 05:05:34.328318 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:34.328375 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:34.330372 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:34.330497 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:34.331039 systemd-sysext[2019]: device-mapper: reload ioctl on loop4p1-29-verity (254:2) failed: Invalid argument Oct 21 05:05:34.334766 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:34.483667 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 21 05:05:34.542680 kernel: loop5: detected capacity change from 0 to 183704 Oct 21 05:05:34.653677 kernel: loop5: p1 p2 p3 Oct 21 05:05:35.064700 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:35.064963 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:35.066750 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:35.066766 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:35.067794 systemd-sysext[2019]: device-mapper: reload ioctl on loop5p1-33-verity (254:2) failed: Invalid argument Oct 21 05:05:35.070704 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:35.240687 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 21 05:05:35.259672 kernel: loop6: detected capacity change from 0 to 388272 Oct 21 05:05:35.395680 kernel: loop6: p1 p2 p3 Oct 21 05:05:35.865015 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:35.865221 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:35.865283 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:35.866941 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:35.866968 systemd-sysext[2019]: device-mapper: reload ioctl on loop6p1-37-verity (254:2) failed: Invalid argument Oct 21 05:05:35.870053 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.159687 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 21 05:05:36.300662 kernel: loop7: detected capacity change from 0 to 137048 Oct 21 05:05:36.312686 kernel: loop7: p1 p2 p3 Oct 21 05:05:36.325376 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.325426 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:36.325443 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:36.327884 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:36.327852 (sd-merge)[2042]: device-mapper: reload ioctl on loop7p1-41-verity (254:2) failed: Invalid argument Oct 21 05:05:36.333669 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.363526 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 21 05:05:36.363557 kernel: loop1: detected capacity change from 0 to 183704 Oct 21 05:05:36.373666 kernel: loop1: p1 p2 p3 Oct 21 05:05:36.377943 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.377972 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:36.379177 kernel: device-mapper: table: 254:3: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:36.382624 (sd-merge)[2042]: device-mapper: reload ioctl on loop1p1-45-verity (254:3) failed: Invalid argument Oct 21 05:05:36.387739 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:36.387756 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.416299 kernel: erofs: (device dm-3): mounted with root inode @ nid 39. Oct 21 05:05:36.416335 kernel: loop3: detected capacity change from 0 to 388272 Oct 21 05:05:36.431669 kernel: loop3: p1 p2 p3 Oct 21 05:05:36.440673 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.440705 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:36.440717 kernel: device-mapper: table: 254:4: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:36.442910 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:36.443411 (sd-merge)[2042]: device-mapper: reload ioctl on loop3p1-49-verity (254:4) failed: Invalid argument Oct 21 05:05:36.448761 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:36.487663 kernel: erofs: (device dm-4): mounted with root inode @ nid 39. Oct 21 05:05:36.488540 (sd-merge)[2042]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure-4757.2.2.raw'. Oct 21 05:05:36.490793 (sd-merge)[2042]: Merged extensions into '/sysroot/usr'. Oct 21 05:05:36.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.501023 kernel: audit: type=1130 audit(1792559136.492:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.492699 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Oct 21 05:05:36.497749 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Oct 21 05:05:36.519532 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 21 05:05:36.520457 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Oct 21 05:05:36.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.522874 systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. Oct 21 05:05:36.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.528788 kernel: audit: type=1130 audit(1792559136.522:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.523738 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Oct 21 05:05:36.529810 kernel: audit: type=1131 audit(1792559136.522:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.530021 systemd[1]: Starting dracut-mount.service - dracut mount hook... Oct 21 05:05:36.885457 systemd[1]: Finished dracut-mount.service - dracut mount hook. Oct 21 05:05:36.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.891804 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Oct 21 05:05:36.896763 kernel: audit: type=1130 audit(1792559136.888:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.912181 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Oct 21 05:05:36.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.919286 kernel: audit: type=1130 audit(1792559136.911:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.916706 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Oct 21 05:05:36.933289 systemd[1]: Stopped target basic.target - Basic System. Oct 21 05:05:36.933441 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Oct 21 05:05:36.933583 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Oct 21 05:05:36.933865 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Oct 21 05:05:36.934110 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Oct 21 05:05:36.934301 systemd[1]: Stopped target paths.target - Path Units. Oct 21 05:05:36.934740 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 21 05:05:36.943823 systemd[1]: Stopped target slices.target - Slice Units. Oct 21 05:05:36.947800 systemd[1]: Stopped target sockets.target - Socket Units. Oct 21 05:05:36.951791 systemd[1]: Stopped target sysinit.target - System Initialization. Oct 21 05:05:36.955777 systemd[1]: Stopped target local-fs.target - Local File Systems. Oct 21 05:05:36.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.959783 systemd[1]: Stopped target local-fs-pre.target - Preparation for Local File Systems. Oct 21 05:05:36.962221 systemd[1]: Stopped target swap.target - Swaps. Oct 21 05:05:36.990722 kernel: audit: type=1131 audit(1792559136.980:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.965768 systemd[1]: Stopped target timers.target - Timer Units. Oct 21 05:05:36.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.969739 systemd[1]: iscsid.socket: Deactivated successfully. Oct 21 05:05:36.969832 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Oct 21 05:05:37.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.972157 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 21 05:05:36.972226 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Oct 21 05:05:36.972731 systemd[1]: systemd-coredump.socket: Deactivated successfully. Oct 21 05:05:36.972792 systemd[1]: Closed systemd-coredump.socket - Process Core Dump Socket. Oct 21 05:05:37.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.972979 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Oct 21 05:05:37.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.973036 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Oct 21 05:05:36.973325 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 21 05:05:36.973400 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Oct 21 05:05:36.981103 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Oct 21 05:05:37.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.986212 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Oct 21 05:05:36.988780 systemd[1]: dracut-mount.service: Deactivated successfully. Oct 21 05:05:37.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.043919 ignition[2084]: INFO : Ignition 2.24.0 Oct 21 05:05:37.043919 ignition[2084]: INFO : Stage: umount Oct 21 05:05:37.043919 ignition[2084]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 21 05:05:37.043919 ignition[2084]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 21 05:05:37.043919 ignition[2084]: INFO : umount: umount passed Oct 21 05:05:37.043919 ignition[2084]: INFO : Ignition finished successfully Oct 21 05:05:37.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.988894 systemd[1]: Stopped dracut-mount.service - dracut mount hook. Oct 21 05:05:36.991831 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 21 05:05:37.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.991945 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Oct 21 05:05:36.992132 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Oct 21 05:05:37.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:36.992318 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 21 05:05:36.992572 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 21 05:05:36.992955 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 21 05:05:36.993130 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Oct 21 05:05:36.993474 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 21 05:05:37.001833 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 21 05:05:37.001958 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Oct 21 05:05:37.002145 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 21 05:05:37.002246 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Oct 21 05:05:37.002404 systemd[1]: ignition-files.service: Deactivated successfully. Oct 21 05:05:37.002476 systemd[1]: Stopped ignition-files.service - Ignition (files). Oct 21 05:05:37.012968 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 21 05:05:37.013048 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Oct 21 05:05:37.020051 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Oct 21 05:05:37.022003 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 21 05:05:37.022105 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Oct 21 05:05:37.028698 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Oct 21 05:05:37.028787 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 21 05:05:37.028891 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 21 05:05:37.028960 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Oct 21 05:05:37.034872 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 21 05:05:37.034981 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Oct 21 05:05:37.043627 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 21 05:05:37.043727 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Oct 21 05:05:37.046773 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 21 05:05:37.046976 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Oct 21 05:05:37.051276 systemd[1]: Stopped target network.target - Network. Oct 21 05:05:37.051566 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 21 05:05:37.051607 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Oct 21 05:05:37.052191 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Oct 21 05:05:37.052218 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Oct 21 05:05:37.052415 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 21 05:05:37.052434 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Oct 21 05:05:37.060817 systemd[1]: Stopping systemd-networkd.service - Network Management... Oct 21 05:05:37.063382 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Oct 21 05:05:37.067191 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 21 05:05:37.067301 systemd[1]: Stopped systemd-networkd.service - Network Management. Oct 21 05:05:37.071462 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 21 05:05:37.071551 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Oct 21 05:05:37.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.113000 audit: BPF prog-id=8 op=UNLOAD Oct 21 05:05:37.113000 audit: BPF prog-id=5 op=UNLOAD Oct 21 05:05:37.114461 systemd[1]: systemd-networkd-resolve-hook.socket: Deactivated successfully. Oct 21 05:05:37.114507 systemd[1]: Closed systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 21 05:05:37.115304 systemd[1]: Stopped target network-pre.target - Preparation for Network. Oct 21 05:05:37.115331 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 21 05:05:37.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.115359 systemd[1]: Closed systemd-networkd.socket - Network Management Netlink Socket. Oct 21 05:05:37.116792 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Oct 21 05:05:37.122304 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 21 05:05:37.122347 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Oct 21 05:05:37.124508 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 21 05:05:37.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.140185 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 21 05:05:37.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.140298 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 21 05:05:37.146145 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 21 05:05:37.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.146211 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Oct 21 05:05:37.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.149746 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 21 05:05:37.149782 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Oct 21 05:05:37.151883 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 21 05:05:37.151911 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Oct 21 05:05:37.155736 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 21 05:05:37.155764 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Oct 21 05:05:37.159777 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Oct 21 05:05:37.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.189514 kernel: hv_netvsc f8615163-0000-1000-2000-7c1e522dce99 eth0: Data path switched from VF: enP30832s1 Oct 21 05:05:37.159944 systemd[1]: systemd-network-generator.service: Deactivated successfully. Oct 21 05:05:37.190795 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Oct 21 05:05:37.159980 systemd[1]: Stopped systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 21 05:05:37.160229 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 21 05:05:37.160255 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 21 05:05:37.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:37.160455 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. Oct 21 05:05:37.160475 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 21 05:05:37.160708 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 21 05:05:37.160727 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Oct 21 05:05:37.160948 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 21 05:05:37.160968 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:37.180900 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 21 05:05:37.181002 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Oct 21 05:05:37.194097 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 21 05:05:37.194187 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Oct 21 05:05:37.196789 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Oct 21 05:05:37.201239 systemd[1]: Starting initrd-switch-root.service - Switch Root... Oct 21 05:05:37.215125 systemd[1]: Switching root. Oct 21 05:05:37.270353 systemd-journald[1158]: Journal stopped Oct 21 05:05:45.543643 systemd-journald[1158]: Received SIGTERM from PID 1 (systemd). Oct 21 05:05:45.543689 kernel: SELinux: policy capability network_peer_controls=1 Oct 21 05:05:45.543697 kernel: SELinux: policy capability open_perms=1 Oct 21 05:05:45.543702 kernel: SELinux: policy capability extended_socket_class=1 Oct 21 05:05:45.543709 kernel: SELinux: policy capability always_check_network=0 Oct 21 05:05:45.543714 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 21 05:05:45.543720 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 21 05:05:45.543725 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 21 05:05:45.543731 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 21 05:05:45.543736 kernel: SELinux: policy capability userspace_initial_context=0 Oct 21 05:05:45.543743 systemd[1]: Successfully loaded SELinux policy in 167.608ms. Oct 21 05:05:45.543749 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 5.027ms. Oct 21 05:05:45.543755 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Oct 21 05:05:45.543761 systemd[1]: Detected virtualization microsoft. Oct 21 05:05:45.543769 systemd[1]: Detected architecture x86-64. Oct 21 05:05:45.543775 systemd[1]: Detected first boot. Oct 21 05:05:45.543781 systemd[1]: Initializing machine ID from random generator. Oct 21 05:05:45.543786 systemd[1]: Hostname set to . Oct 21 05:05:45.543792 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 21 05:05:45.543799 kernel: audit: type=1334 audit(1792559140.779:85): prog-id=9 op=LOAD Oct 21 05:05:45.543805 kernel: audit: type=1334 audit(1792559140.779:86): prog-id=9 op=UNLOAD Oct 21 05:05:45.543811 zram_generator::config[2125]: No configuration found. Oct 21 05:05:45.543817 kernel: Guest personality initialized and is inactive Oct 21 05:05:45.543822 kernel: VMCI host device registered (name=vmci, major=10, minor=259) Oct 21 05:05:45.543828 kernel: Initialized host personality Oct 21 05:05:45.543835 kernel: NET: Registered PF_VSOCK protocol family Oct 21 05:05:45.543840 systemd[1]: Applying preset policy. Oct 21 05:05:45.543848 systemd[1]: Created symlink '/etc/systemd/system/multi-user.target.wants/etcd-member.service' → '/usr/lib/systemd/system/etcd-member.service'. Oct 21 05:05:45.543854 systemd[1]: Created symlink '/etc/systemd/system/timers.target.wants/google-oslogin-cache.timer' → '/usr/lib/systemd/system/google-oslogin-cache.timer'. Oct 21 05:05:45.543860 systemd[1]: Populated /etc with preset unit settings. Oct 21 05:05:45.543865 kernel: audit: type=1334 audit(1792559144.801:87): prog-id=10 op=LOAD Oct 21 05:05:45.543871 kernel: audit: type=1334 audit(1792559144.802:88): prog-id=2 op=UNLOAD Oct 21 05:05:45.543878 kernel: audit: type=1334 audit(1792559144.802:89): prog-id=11 op=LOAD Oct 21 05:05:45.543883 kernel: audit: type=1334 audit(1792559144.802:90): prog-id=12 op=LOAD Oct 21 05:05:45.543888 kernel: audit: type=1334 audit(1792559144.802:91): prog-id=3 op=UNLOAD Oct 21 05:05:45.543894 kernel: audit: type=1334 audit(1792559144.802:92): prog-id=4 op=UNLOAD Oct 21 05:05:45.543899 kernel: audit: type=1334 audit(1792559144.803:93): prog-id=13 op=LOAD Oct 21 05:05:45.543904 kernel: audit: type=1334 audit(1792559144.803:94): prog-id=10 op=UNLOAD Oct 21 05:05:45.543911 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 21 05:05:45.543918 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Oct 21 05:05:45.543926 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 21 05:05:45.543933 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Oct 21 05:05:45.543939 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Oct 21 05:05:45.543944 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Oct 21 05:05:45.543952 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Oct 21 05:05:45.543958 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Oct 21 05:05:45.543964 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Oct 21 05:05:45.543970 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Oct 21 05:05:45.543976 systemd[1]: Created slice user.slice - User and Session Slice. Oct 21 05:05:45.543982 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 21 05:05:45.543988 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 21 05:05:45.543995 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Oct 21 05:05:45.544001 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Oct 21 05:05:45.544007 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Oct 21 05:05:45.544013 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Oct 21 05:05:45.544019 systemd[1]: Expecting device dev-ptp_hyperv.device - /dev/ptp_hyperv... Oct 21 05:05:45.544025 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... Oct 21 05:05:45.544033 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 21 05:05:45.544039 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Oct 21 05:05:45.544044 systemd[1]: Reached target imports.target - Image Downloads. Oct 21 05:05:45.544051 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Oct 21 05:05:45.544058 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Oct 21 05:05:45.544064 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Oct 21 05:05:45.544070 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Oct 21 05:05:45.544077 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 21 05:05:45.544083 systemd[1]: Reached target remote-fs.target - Remote File Systems. Oct 21 05:05:45.544089 systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. Oct 21 05:05:45.544097 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Oct 21 05:05:45.544103 systemd[1]: Reached target slices.target - Slice Units. Oct 21 05:05:45.544109 systemd[1]: Reached target swap.target - Swaps. Oct 21 05:05:45.544115 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Oct 21 05:05:45.544121 systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Oct 21 05:05:45.544127 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Oct 21 05:05:45.544132 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Oct 21 05:05:45.544140 systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. Oct 21 05:05:45.544146 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Oct 21 05:05:45.544152 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Oct 21 05:05:45.544158 systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. Oct 21 05:05:45.544164 systemd[1]: Listening on systemd-networkd-varlink-metrics.socket - Network Management Metrics Varlink Socket. Oct 21 05:05:45.544170 systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. Oct 21 05:05:45.544176 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Oct 21 05:05:45.544184 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Oct 21 05:05:45.544191 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Oct 21 05:05:45.544196 systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. Oct 21 05:05:45.544203 systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. Oct 21 05:05:45.544209 systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. Oct 21 05:05:45.544215 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Oct 21 05:05:45.544222 systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. Oct 21 05:05:45.544228 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Oct 21 05:05:45.544234 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Oct 21 05:05:45.544240 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Oct 21 05:05:45.544246 systemd[1]: Mounting media.mount - External Media Directory... Oct 21 05:05:45.544253 systemd[1]: proc-xen.mount - /proc/xen skipped, unmet condition check ConditionVirtualization=xen Oct 21 05:05:45.544259 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Oct 21 05:05:45.544266 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Oct 21 05:05:45.544272 systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. Oct 21 05:05:45.544278 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Oct 21 05:05:45.544284 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Oct 21 05:05:45.544290 systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. Oct 21 05:05:45.544296 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Oct 21 05:05:45.544302 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Oct 21 05:05:45.544310 systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Oct 21 05:05:45.544317 systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore Oct 21 05:05:45.544323 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Oct 21 05:05:45.544329 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf Oct 21 05:05:45.544335 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 21 05:05:45.544341 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Oct 21 05:05:45.544348 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 Oct 21 05:05:45.544355 systemd[1]: Starting systemd-journald.service - Journal Service... Oct 21 05:05:45.544360 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Oct 21 05:05:45.544367 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Oct 21 05:05:45.544373 systemd[1]: Reached target time-set.target - System Time Set. Oct 21 05:05:45.544379 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Oct 21 05:05:45.544385 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Oct 21 05:05:45.544392 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Oct 21 05:05:45.544398 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen Oct 21 05:05:45.544404 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Oct 21 05:05:45.544410 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Oct 21 05:05:45.544421 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Oct 21 05:05:45.544427 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Oct 21 05:05:45.544433 systemd[1]: Mounted media.mount - External Media Directory. Oct 21 05:05:45.544439 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Oct 21 05:05:45.544447 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Oct 21 05:05:45.544454 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Oct 21 05:05:45.544460 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 21 05:05:45.544466 systemd[1]: Reached target network-pre.target - Preparation for Network. Oct 21 05:05:45.544472 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 21 05:05:45.544487 systemd-journald[2201]: Collecting audit messages is enabled. Oct 21 05:05:45.544505 systemd-journald[2201]: Journal started Oct 21 05:05:45.544520 systemd-journald[2201]: Runtime Journal (/run/log/journal/b8316c32dc5640a2baef264f50d02eb0) is 8M, max 158.5M, 150.5M free. Oct 21 05:05:45.036000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Oct 21 05:05:45.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.288000 audit: BPF prog-id=18 op=UNLOAD Oct 21 05:05:45.288000 audit: BPF prog-id=17 op=UNLOAD Oct 21 05:05:45.289000 audit: BPF prog-id=19 op=LOAD Oct 21 05:05:45.289000 audit: BPF prog-id=20 op=LOAD Oct 21 05:05:45.289000 audit: BPF prog-id=21 op=LOAD Oct 21 05:05:45.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.541000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 21 05:05:45.541000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffedb0e17d0 a2=4000 a3=0 items=0 ppid=1 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:05:45.541000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 21 05:05:44.792260 systemd[1]: Queued start job for default target multi-user.target. Oct 21 05:05:44.805002 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device - /dev/nvme0n1p6. Oct 21 05:05:44.805246 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 21 05:05:45.547132 systemd[1]: Started systemd-journald.service - Journal Service. Oct 21 05:05:45.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.613411 systemd-modules-load[2205]: Using 2 probe threads Oct 21 05:05:45.647189 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Oct 21 05:05:45.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.648805 systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ Oct 21 05:05:45.720214 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Oct 21 05:05:45.722137 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Oct 21 05:05:45.724181 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore Oct 21 05:05:45.726296 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Oct 21 05:05:45.728910 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 21 05:05:45.730747 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Oct 21 05:05:45.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.759635 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Oct 21 05:05:45.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.806397 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Oct 21 05:05:45.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.815539 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Oct 21 05:05:45.817047 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 21 05:05:45.817065 kernel: audit: type=1130 audit(1792559145.807:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.819346 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Oct 21 05:05:45.823711 kernel: audit: type=1130 audit(1792559145.818:125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.835606 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 21 05:05:45.835690 kernel: fuse: init (API version 7.41) Oct 21 05:05:45.835779 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Oct 21 05:05:45.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.844741 kernel: audit: type=1130 audit(1792559145.838:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.844764 kernel: audit: type=1131 audit(1792559145.838:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:45.897964 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Oct 21 05:05:45.901731 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Oct 21 05:05:45.912314 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Oct 21 05:05:45.914803 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Oct 21 05:05:45.962376 systemd-journald[2201]: Time spent on flushing to /var/log/journal/b8316c32dc5640a2baef264f50d02eb0 is 9.633ms for 1200 entries. Oct 21 05:05:45.962376 systemd-journald[2201]: System Journal (/var/log/journal/b8316c32dc5640a2baef264f50d02eb0) is 8M, max 2.2G, 2.2G free. Oct 21 05:05:46.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.093297 systemd-journald[2201]: Received client request to flush runtime journal. Oct 21 05:05:46.022463 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Oct 21 05:05:46.093418 kernel: audit: type=1130 audit(1792559146.023:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.026069 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Oct 21 05:05:46.093822 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Oct 21 05:05:46.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.098663 kernel: audit: type=1130 audit(1792559146.094:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.303008 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Oct 21 05:05:46.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.307684 kernel: audit: type=1130 audit(1792559146.303:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.317551 systemd-tmpfiles[2210]: ACLs are not supported, ignoring. Oct 21 05:05:46.317570 systemd-tmpfiles[2210]: ACLs are not supported, ignoring. Oct 21 05:05:46.319714 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 21 05:05:46.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.325784 kernel: audit: type=1130 audit(1792559146.320:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.449260 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Oct 21 05:05:46.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.453975 systemd[1]: Starting systemd-sysusers.service - Create System Users... Oct 21 05:05:46.454672 kernel: audit: type=1130 audit(1792559146.449:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.900736 systemd[1]: Finished systemd-sysusers.service - Create System Users. Oct 21 05:05:46.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.908764 kernel: audit: type=1130 audit(1792559146.901:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.909445 systemd[1]: Starting systemd-journalctl.socket - Journal Log Access Socket... Oct 21 05:05:46.915000 audit: BPF prog-id=22 op=LOAD Oct 21 05:05:46.915000 audit: BPF prog-id=23 op=LOAD Oct 21 05:05:46.915000 audit: BPF prog-id=24 op=LOAD Oct 21 05:05:46.916937 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Oct 21 05:05:46.919000 audit: BPF prog-id=25 op=LOAD Oct 21 05:05:46.922802 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Oct 21 05:05:46.926795 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Oct 21 05:05:46.928393 systemd[1]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Oct 21 05:05:46.932774 systemd[1]: Starting modprobe@tun.service - Load Kernel Module tun... Oct 21 05:05:46.942000 audit: BPF prog-id=26 op=LOAD Oct 21 05:05:46.942000 audit: BPF prog-id=27 op=LOAD Oct 21 05:05:46.942000 audit: BPF prog-id=28 op=LOAD Oct 21 05:05:46.945773 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Oct 21 05:05:46.954506 systemd-tmpfiles[2271]: ACLs are not supported, ignoring. Oct 21 05:05:46.954689 systemd-tmpfiles[2271]: ACLs are not supported, ignoring. Oct 21 05:05:46.958843 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 21 05:05:46.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:46.965004 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Oct 21 05:05:46.970734 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) skipped, unmet condition check ConditionPathExists=/var/lib/machines.raw Oct 21 05:05:46.970762 systemd[1]: Reached target local-fs.target - Local File Systems. Oct 21 05:05:46.974737 systemd[1]: Reached target machines.target - Virtual Machines and Containers. Oct 21 05:05:47.002112 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Oct 21 05:05:47.006497 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Oct 21 05:05:47.018212 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats skipped, no trigger condition checks were met. Oct 21 05:05:47.019607 systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... Oct 21 05:05:47.022701 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Oct 21 05:05:47.025787 systemd[1]: systemd-repart.service - Repartition Root Disk skipped, no trigger condition checks were met. Oct 21 05:05:47.026587 systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... Oct 21 05:05:47.030120 systemd[1]: proc-sys-fs-binfmt_misc.automount: Got automount request for /proc/sys/fs/binfmt_misc, triggered by 2273 ((systemd-userd)) Oct 21 05:05:47.033302 systemd[1]: Mounting proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System... Oct 21 05:05:47.085672 kernel: tun: Universal TUN/TAP device driver, 1.6 Oct 21 05:05:47.085785 systemd[1]: modprobe@tun.service: Deactivated successfully. Oct 21 05:05:47.085939 systemd[1]: Finished modprobe@tun.service - Load Kernel Module tun. Oct 21 05:05:47.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.087000 audit: BPF prog-id=29 op=LOAD Oct 21 05:05:47.087000 audit: BPF prog-id=30 op=LOAD Oct 21 05:05:47.087000 audit: BPF prog-id=31 op=LOAD Oct 21 05:05:47.088300 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Oct 21 05:05:47.142736 systemd[1]: Finished systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials. Oct 21 05:05:47.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.160288 systemd[1]: Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System. Oct 21 05:05:47.166716 kernel: loop4: detected capacity change from 0 to 44360 Oct 21 05:05:47.177659 kernel: loop4: p1 p2 p3 Oct 21 05:05:47.201921 systemd-nsresourced[2284]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Oct 21 05:05:47.202796 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Oct 21 05:05:47.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.242958 systemd[1]: Started systemd-userdbd.service - User Database Manager. Oct 21 05:05:47.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.328674 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:47.332611 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:47.332669 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:47.333903 systemd-confext[2280]: device-mapper: reload ioctl on loop4p1-53-verity (254:5) failed: Invalid argument Oct 21 05:05:47.335659 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:47.342716 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:47.369418 systemd-oomd[2269]: No swap; memory pressure usage will be degraded Oct 21 05:05:47.370210 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Oct 21 05:05:47.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.420043 systemd-resolved[2270]: Positive Trust Anchors: Oct 21 05:05:47.420058 systemd-resolved[2270]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 21 05:05:47.420061 systemd-resolved[2270]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Oct 21 05:05:47.420091 systemd-resolved[2270]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Oct 21 05:05:47.616055 systemd-resolved[2270]: Using system hostname 'ci-4757.2.2-a-365c1c1670'. Oct 21 05:05:47.617071 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Oct 21 05:05:47.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.618554 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Oct 21 05:05:47.724456 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Oct 21 05:05:47.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:47.728000 audit: BPF prog-id=7 op=UNLOAD Oct 21 05:05:47.728000 audit: BPF prog-id=6 op=UNLOAD Oct 21 05:05:47.728000 audit: BPF prog-id=32 op=LOAD Oct 21 05:05:47.728000 audit: BPF prog-id=33 op=LOAD Oct 21 05:05:47.729983 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 21 05:05:47.975221 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 21 05:05:47.976377 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Oct 21 05:05:47.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:48.056504 systemd-udevd[2304]: Using default interface naming scheme 'v260'. Oct 21 05:05:48.479275 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 21 05:05:48.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:48.482000 audit: BPF prog-id=34 op=LOAD Oct 21 05:05:48.485795 systemd[1]: Starting systemd-networkd.service - Network Management... Oct 21 05:05:48.555974 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped. Oct 21 05:05:48.908709 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#281 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Oct 21 05:05:49.033674 kernel: mousedev: PS/2 mouse device common for all mice Oct 21 05:05:49.167711 kernel: hv_vmbus: registering driver hyperv_fb Oct 21 05:05:49.170523 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 21 05:05:49.170547 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 21 05:05:49.171773 kernel: Console: switching to colour dummy device 80x25 Oct 21 05:05:49.171815 kernel: hv_vmbus: registering driver hv_balloon Oct 21 05:05:49.173245 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 21 05:05:49.177272 kernel: Console: switching to colour frame buffer device 128x48 Oct 21 05:05:49.212904 systemd[1]: Condition check resulted in dev-ptp_hyperv.device - /dev/ptp_hyperv being skipped. Oct 21 05:05:49.374163 systemd-networkd[2307]: lo: Link UP Oct 21 05:05:49.374169 systemd-networkd[2307]: lo: Gained carrier Oct 21 05:05:49.376873 systemd-networkd[2307]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 21 05:05:49.383389 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 Oct 21 05:05:49.376879 systemd-networkd[2307]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 21 05:05:49.383726 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Oct 21 05:05:49.380970 systemd[1]: Started systemd-networkd.service - Network Management. Oct 21 05:05:49.384101 systemd[1]: Reached target network.target - Network. Oct 21 05:05:49.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.385758 kernel: hv_netvsc f8615163-0000-1000-2000-7c1e522dce99 eth0: Data path switched to VF: enP30832s1 Oct 21 05:05:49.386402 systemd-networkd[2307]: enP30832s1: Link UP Oct 21 05:05:49.386994 systemd-networkd[2307]: eth0: Link UP Oct 21 05:05:49.386999 systemd-networkd[2307]: eth0: Gained carrier Oct 21 05:05:49.387012 systemd-networkd[2307]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 21 05:05:49.388194 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Oct 21 05:05:49.392337 systemd-networkd[2307]: enP30832s1: Gained carrier Oct 21 05:05:49.392849 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Online... Oct 21 05:05:49.398702 systemd-networkd[2307]: eth0: DHCPv4 address 10.0.0.11/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 21 05:05:49.426427 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 21 05:05:49.433944 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 21 05:05:49.434122 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:49.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.438627 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 21 05:05:49.468668 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Oct 21 05:05:49.511904 kernel: kvm_intel: Using Hyper-V Enlightened VMCS Oct 21 05:05:49.515804 kernel: cpu_based_exec_ctrl unsupported with eVMCS: 0x20000 Oct 21 05:05:49.517264 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Oct 21 05:05:49.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.538669 kernel: loop4: detected capacity change from 0 to 44360 Oct 21 05:05:49.573663 kernel: loop4: p1 p2 p3 Oct 21 05:05:49.580368 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.580417 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:49.580438 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:49.581021 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:49.581079 (sd-merge)[2381]: device-mapper: reload ioctl on loop4p1-58-verity (254:5) failed: Invalid argument Oct 21 05:05:49.583667 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.602578 (sd-merge)[2381]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 21 05:05:49.602677 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Oct 21 05:05:49.604798 systemd[1]: Finished systemd-confext.service - Merge System Configuration Images into /etc/. Oct 21 05:05:49.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.607061 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Oct 21 05:05:49.619667 kernel: loop4: detected capacity change from 0 to 388272 Oct 21 05:05:49.646520 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. Oct 21 05:05:49.649794 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Oct 21 05:05:49.657944 kernel: loop4: p1 p2 p3 Oct 21 05:05:49.669959 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.670006 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:49.671673 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:49.672917 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:49.672980 systemd-sysext[2393]: device-mapper: reload ioctl on loop4p1-62-verity (254:5) failed: Invalid argument Oct 21 05:05:49.677692 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.711824 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Oct 21 05:05:49.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.722681 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 21 05:05:49.757740 kernel: loop4: detected capacity change from 0 to 183704 Oct 21 05:05:49.776690 kernel: loop4: p1 p2 p3 Oct 21 05:05:49.781711 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.781760 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:49.783560 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:49.784869 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:49.785297 systemd-sysext[2393]: device-mapper: reload ioctl on loop4p1-67-verity (254:5) failed: Invalid argument Oct 21 05:05:49.788677 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.814680 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 21 05:05:49.837667 kernel: loop4: detected capacity change from 0 to 137048 Oct 21 05:05:49.842688 kernel: loop4: p1 p2 p3 Oct 21 05:05:49.884909 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.885102 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:49.885164 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:49.886472 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:49.886412 systemd-sysext[2393]: device-mapper: reload ioctl on loop4p1-72-verity (254:5) failed: Invalid argument Oct 21 05:05:49.889058 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.909667 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 21 05:05:49.931705 kernel: loop4: detected capacity change from 0 to 388272 Oct 21 05:05:49.938661 kernel: loop4: p1 p2 p3 Oct 21 05:05:49.946984 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.947029 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:49.949024 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:49.950401 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:49.950477 (sd-merge)[2426]: device-mapper: reload ioctl on loop4p1-77-verity (254:5) failed: Invalid argument Oct 21 05:05:49.953674 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:49.964931 systemd-vconsole-setup[2374]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 21 05:05:49.966233 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 21 05:05:49.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:49.984519 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 21 05:05:49.987682 kernel: loop5: detected capacity change from 0 to 183704 Oct 21 05:05:49.995664 kernel: loop5: p1 p2 p3 Oct 21 05:05:50.003670 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:50.003720 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:50.005381 kernel: device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:50.006927 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:50.007245 (sd-merge)[2426]: device-mapper: reload ioctl on loop5p1-81-verity (254:6) failed: Invalid argument Oct 21 05:05:50.009670 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:50.035674 kernel: erofs: (device dm-6): mounted with root inode @ nid 39. Oct 21 05:05:50.037693 kernel: loop6: detected capacity change from 0 to 137048 Oct 21 05:05:50.046694 kernel: loop6: p1 p2 p3 Oct 21 05:05:50.052193 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:50.052239 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 21 05:05:50.053048 kernel: device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) Oct 21 05:05:50.053939 kernel: device-mapper: ioctl: error adding target to table Oct 21 05:05:50.053998 (sd-merge)[2426]: device-mapper: reload ioctl on loop6p1-85-verity (254:7) failed: Invalid argument Oct 21 05:05:50.056687 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Oct 21 05:05:50.081272 (sd-merge)[2426]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 21 05:05:50.081662 kernel: erofs: (device dm-7): mounted with root inode @ nid 39. Oct 21 05:05:50.082927 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Oct 21 05:05:50.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:50.087859 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Oct 21 05:05:50.110369 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/base_image_var.conf:29: Duplicate line for path "/var/log/audit", ignoring. Oct 21 05:05:50.111015 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/base_image_var_late.conf:44: Duplicate line for path "/var/log/audit", ignoring. Oct 21 05:05:50.111215 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/baselayout.conf:15: Duplicate line for path "/var", ignoring. Oct 21 05:05:50.111226 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/baselayout.conf:16: Duplicate line for path "/var/empty", ignoring. Oct 21 05:05:50.111243 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/baselayout.conf:21: Duplicate line for path "/var/log", ignoring. Oct 21 05:05:50.111350 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/dbus.conf:5: Duplicate line for path "/var/lib/dbus", ignoring. Oct 21 05:05:50.111566 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/nfs-utils.conf:2: Duplicate line for path "/var/lib/nfs/v4recovery", ignoring. Oct 21 05:05:50.186033 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Oct 21 05:05:50.186057 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Oct 21 05:05:50.186236 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 21 05:05:50.186973 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Duplicate line for path "/var/lib/tpm2-tss/system/keystore", ignoring. Oct 21 05:05:50.186986 systemd-tmpfiles[2449]: ACLs are not supported, ignoring. Oct 21 05:05:50.187027 systemd-tmpfiles[2449]: ACLs are not supported, ignoring. Oct 21 05:05:50.187359 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/var.conf:10: Duplicate line for path "/var", ignoring. Oct 21 05:05:50.187373 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Oct 21 05:05:50.187437 systemd-tmpfiles[2449]: /usr/lib/tmpfiles.d/var.conf:21: Duplicate line for path "/var/lib", ignoring. Oct 21 05:05:50.189734 systemd-tmpfiles[2449]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Oct 21 05:05:50.189742 systemd-tmpfiles[2449]: Skipping /boot Oct 21 05:05:50.194015 systemd-tmpfiles[2449]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Oct 21 05:05:50.194025 systemd-tmpfiles[2449]: Skipping /boot Oct 21 05:05:50.199976 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 21 05:05:50.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:50.202515 systemd[1]: Starting audit-rules.service - Load Audit Rules... Oct 21 05:05:50.211874 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Oct 21 05:05:50.215768 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Oct 21 05:05:50.220771 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Oct 21 05:05:50.229766 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Oct 21 05:05:50.267000 audit[2456]: AUDIT1127 pid=2456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 21 05:05:50.270881 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Oct 21 05:05:50.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:50.456783 systemd-networkd[2307]: eth0: Gained IPv6LL Oct 21 05:05:50.458039 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Online. Oct 21 05:05:50.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:05:50.459721 systemd[1]: Reached target network-online.target - Network is Online. Oct 21 05:05:50.731000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 21 05:05:50.731000 audit[2481]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe87002cb0 a2=420 a3=0 items=0 ppid=2452 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:05:50.731000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 21 05:05:50.732083 augenrules[2481]: No rules Oct 21 05:05:50.732401 systemd[1]: audit-rules.service: Deactivated successfully. Oct 21 05:05:50.732635 systemd[1]: Finished audit-rules.service - Load Audit Rules. Oct 21 05:05:50.746789 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Oct 21 05:05:50.985789 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Oct 21 05:05:50.987214 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt skipped, unmet condition check ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt Oct 21 05:05:59.656232 ldconfig[2454]: ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 21 05:05:59.670412 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Oct 21 05:05:59.675008 systemd[1]: Starting systemd-update-done.service - Update is Completed... Oct 21 05:05:59.706638 systemd[1]: Finished systemd-update-done.service - Update is Completed. Oct 21 05:05:59.709868 systemd[1]: Reached target sysinit.target - System Initialization. Oct 21 05:05:59.712783 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Oct 21 05:05:59.715733 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Oct 21 05:05:59.718709 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer. Oct 21 05:05:59.720127 systemd[1]: Started logrotate.timer - Daily rotation of log files. Oct 21 05:05:59.722766 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Oct 21 05:05:59.724230 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Oct 21 05:05:59.726760 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Oct 21 05:05:59.729692 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Oct 21 05:05:59.732695 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer skipped, unmet condition check ConditionPathExists=/usr/.noupdate Oct 21 05:05:59.732738 systemd[1]: Reached target paths.target - Path Units. Oct 21 05:05:59.734700 systemd[1]: Reached target timers.target - Timer Units. Oct 21 05:05:59.739230 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Oct 21 05:05:59.742600 systemd[1]: Starting docker.socket - Docker Socket for the API... Oct 21 05:05:59.746959 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Oct 21 05:05:59.750907 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Oct 21 05:05:59.753964 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Oct 21 05:05:59.755785 systemd[1]: Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket. Oct 21 05:05:59.758892 systemd[1]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Oct 21 05:05:59.762168 systemd[1]: Listening on docker.socket - Docker Socket for the API. Oct 21 05:05:59.763974 systemd[1]: Reached target sockets.target - Socket Units. Oct 21 05:05:59.765102 systemd[1]: Reached target basic.target - Basic System. Oct 21 05:05:59.766076 systemd[1]: addon-config@oem.service - Configure Addon /oem skipped, no trigger condition checks were met. Oct 21 05:05:59.766106 systemd[1]: addon-run@oem.service - Run Addon /oem skipped, no trigger condition checks were met. Oct 21 05:05:59.767562 systemd[1]: Starting chronyd.service - NTP client/server... Oct 21 05:05:59.770071 systemd[1]: Starting containerd.service - containerd container runtime... Oct 21 05:05:59.775319 systemd[1]: Starting coreos-metadata.service - Flatcar Metadata Agent... Oct 21 05:05:59.782053 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Oct 21 05:05:59.787273 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Oct 21 05:05:59.792587 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Oct 21 05:05:59.795473 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Oct 21 05:05:59.797400 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS skipped, unmet condition check ConditionPathExists=/oem/bin/flatcar-setup-environment Oct 21 05:05:59.799193 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh... Oct 21 05:05:59.800905 systemd[1]: hv_fcopy_uio_daemon.service - Hyper-V FCOPY UIO daemon skipped, unmet condition check ConditionPathExists=/sys/bus/vmbus/devices/eb765408-105f-49b6-b4aa-c123b64d17d4/uio Oct 21 05:05:59.802831 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon. Oct 21 05:05:59.804698 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon skipped, unmet condition check ConditionPathExists=/dev/vmbus/hv_vss Oct 21 05:05:59.809089 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Oct 21 05:05:59.815801 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Oct 21 05:05:59.820775 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Oct 21 05:05:59.827839 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Oct 21 05:05:59.836817 systemd[1]: Starting systemd-logind.service - User Login Management... Oct 21 05:05:59.838466 systemd[1]: tcsd.service - TCG Core Services Daemon skipped, unmet condition check ConditionPathExists=/dev/tpm0 Oct 21 05:05:59.839376 systemd[1]: Starting update-engine.service - Update Engine... Oct 21 05:05:59.844778 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Oct 21 05:05:59.848785 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 21 05:05:59.849071 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Oct 21 05:05:59.865067 KVP[2505]: KVP starting; pid is:2505 Oct 21 05:05:59.867070 KVP[2505]: KVP LIC Version: 3.1 Oct 21 05:05:59.868669 kernel: hv_utils: KVP IC version 4.0 Oct 21 05:05:59.875102 jq[2516]: true Oct 21 05:05:59.875295 jq[2502]: false Oct 21 05:05:59.876957 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 21 05:05:59.877173 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Oct 21 05:05:59.883488 oslogin_cache_refresh[2504]: Refreshing passwd entry cache Oct 21 05:05:59.884584 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Refreshing passwd entry cache Oct 21 05:05:59.888179 jq[2531]: true Oct 21 05:05:59.897979 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Failure getting users, quitting Oct 21 05:05:59.898023 oslogin_cache_refresh[2504]: Failure getting users, quitting Oct 21 05:05:59.898070 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Oct 21 05:05:59.898086 oslogin_cache_refresh[2504]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Oct 21 05:05:59.898140 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Refreshing group entry cache Oct 21 05:05:59.898156 oslogin_cache_refresh[2504]: Refreshing group entry cache Oct 21 05:05:59.917108 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Failure getting groups, quitting Oct 21 05:05:59.917108 google_oslogin_nss_cache[2504]: oslogin_cache_refresh[2504]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Oct 21 05:05:59.917075 oslogin_cache_refresh[2504]: Failure getting groups, quitting Oct 21 05:05:59.917085 oslogin_cache_refresh[2504]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Oct 21 05:05:59.918064 systemd[1]: google-oslogin-cache.service: Deactivated successfully. Oct 21 05:05:59.918376 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh. Oct 21 05:05:59.920321 chronyd[2494]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG) Oct 21 05:05:59.958030 motdgen[2555]: /oem/oem-release: line 2: Azure: command not found Oct 21 05:05:59.958145 extend-filesystems[2503]: Found /dev/nvme0n1p6 Oct 21 05:05:59.962981 systemd[1]: motdgen.service: Deactivated successfully. Oct 21 05:05:59.963187 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Oct 21 05:06:00.064092 systemd-logind[2513]: New seat seat0. Oct 21 05:06:00.066170 systemd-logind[2513]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 21 05:06:00.066429 systemd[1]: Started systemd-logind.service - User Login Management. Oct 21 05:06:00.132224 extend-filesystems[2503]: Found /dev/nvme0n1p9 Oct 21 05:06:00.162993 extend-filesystems[2503]: Checking size of /dev/nvme0n1p9 Oct 21 05:06:00.192454 update_engine[2514]: I20261021 05:06:00.192389 2514 main.cc:92] Flatcar Update Engine starting Oct 21 05:06:00.196513 sshd_keygen[2537]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 MLDSA44-ED25519 Oct 21 05:06:00.215544 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Oct 21 05:06:00.217912 systemd[1]: Starting issuegen.service - Generate /run/issue... Oct 21 05:06:00.221766 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent... Oct 21 05:06:00.235304 systemd[1]: issuegen.service: Deactivated successfully. Oct 21 05:06:00.235536 systemd[1]: Finished issuegen.service - Generate /run/issue. Oct 21 05:06:00.240370 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Oct 21 05:06:00.246615 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent. Oct 21 05:06:00.269617 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Oct 21 05:06:00.274856 bash[2553]: Updated "/home/core/.ssh/authorized_keys" Oct 21 05:06:00.275770 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Oct 21 05:06:00.277541 systemd[1]: sshkeys.service skipped, no trigger condition checks were met. Oct 21 05:06:00.342207 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Oct 21 05:06:00.345025 extend-filesystems[2503]: Resized partition /dev/nvme0n1p9 Oct 21 05:06:00.346479 systemd[1]: Started getty@tty1.service - Getty on tty1. Oct 21 05:06:00.351822 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0. Oct 21 05:06:00.354069 systemd[1]: Reached target getty.target - Login Prompts. Oct 21 05:06:00.362933 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Oct 21 05:06:00.447794 chronyd[2494]: Timezone right/UTC failed leap second check, ignoring Oct 21 05:06:00.447951 chronyd[2494]: Loaded seccomp filter (level 2) Oct 21 05:06:00.448133 systemd[1]: Started chronyd.service - NTP client/server. Oct 21 05:06:00.464248 extend-filesystems[2616]: resize2fs 1.47.4 (6-Mar-2025) Oct 21 05:06:00.875335 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 6359552 to 6376955 blocks Oct 21 05:06:00.878681 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 6376955 Oct 21 05:06:00.951859 extend-filesystems[2616]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 21 05:06:00.951859 extend-filesystems[2616]: old_desc_blocks = 4, new_desc_blocks = 4 Oct 21 05:06:00.951859 extend-filesystems[2616]: The filesystem on /dev/nvme0n1p9 is now 6376955 (4k) blocks long. Oct 21 05:06:00.956321 extend-filesystems[2503]: Resized filesystem in /dev/nvme0n1p9 Oct 21 05:06:00.957585 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 21 05:06:00.957837 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Oct 21 05:06:01.798011 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Oct 21 05:06:01.799969 systemd[1]: Started sshd@0-1-10.0.0.11:22-109.160.32.128:35370.service - OpenSSH per-connection server daemon (109.160.32.128:35370). Oct 21 05:06:01.916333 dbus-daemon[2497]: [system] SELinux support is enabled Oct 21 05:06:01.916781 systemd[1]: Started dbus.service - D-Bus System Message Bus. Oct 21 05:06:01.920446 update_engine[2514]: I20261021 05:06:01.918852 2514 update_check_scheduler.cc:74] Next update check in 8m32s Oct 21 05:06:01.918751 systemd[1]: system-cloudinit@usr-share-coreos-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/coreos/cloud-config.yml skipped, unmet condition check ConditionFileNotEmpty=/usr/share/coreos/cloud-config.yml Oct 21 05:06:01.918774 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Oct 21 05:06:01.921050 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline skipped, unmet condition check ConditionKernelCommandLine=cloud-config-url Oct 21 05:06:01.921132 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Oct 21 05:06:01.929395 systemd[1]: Started update-engine.service - Update Engine. Oct 21 05:06:01.929628 dbus-daemon[2497]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 21 05:06:01.932038 systemd[1]: Started locksmithd.service - Cluster reboot manager. Oct 21 05:06:02.101848 coreos-metadata[2496]: Oct 21 05:06:02.101 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 21 05:06:02.104195 coreos-metadata[2496]: Oct 21 05:06:02.104 INFO Fetch successful Oct 21 05:06:02.104363 coreos-metadata[2496]: Oct 21 05:06:02.104 INFO Fetching http://168.63.129.16/machine/?comp=goalstate: Attempt #1 Oct 21 05:06:02.106785 coreos-metadata[2496]: Oct 21 05:06:02.106 INFO Fetch successful Oct 21 05:06:02.106785 coreos-metadata[2496]: Oct 21 05:06:02.106 INFO Fetching http://168.63.129.16/machine/3774a473-12c1-40f6-aa02-f43361983060/b609e7ec%2D6076%2D4fa3%2D9c6e%2Df06f289e7a9f.%5Fci%2D4757.2.2%2Da%2D365c1c1670?comp=config&type=sharedConfig&incarnation=1: Attempt #1 Oct 21 05:06:02.107426 coreos-metadata[2496]: Oct 21 05:06:02.107 INFO Fetch successful Oct 21 05:06:02.107588 coreos-metadata[2496]: Oct 21 05:06:02.107 INFO Fetching http://169.254.169.254/metadata/instance/compute/vmSize?api-version=2017-08-01&format=text: Attempt #1 Oct 21 05:06:02.112369 coreos-metadata[2496]: Oct 21 05:06:02.112 INFO Fetch successful Oct 21 05:06:02.142644 systemd[1]: Finished coreos-metadata.service - Flatcar Metadata Agent. Oct 21 05:06:02.147189 systemd[1]: Starting etcd-member.service - etcd (System Application Container)... Oct 21 05:06:02.285196 (etcd-wrapper)[2639]: etcd-member.service: Referenced but unset environment variable evaluates to an empty string: ETCD_OPTS Oct 21 05:06:02.542813 sshd[2628]: Invalid user labuser from 109.160.32.128 port 35370 Oct 21 05:06:03.476142 locksmithd[2632]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 21 05:06:05.260893 sshd[2628]: Connection closed by invalid user labuser 109.160.32.128 port 35370 [preauth] Oct 21 05:06:05.262629 systemd[1]: sshd@0-1-10.0.0.11:22-109.160.32.128:35370.service: Deactivated successfully. Oct 21 05:06:06.154177 login[2610]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 21 05:06:06.154563 login[2609]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 21 05:06:06.160833 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Oct 21 05:06:06.161744 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Oct 21 05:06:06.164241 systemd-logind[2513]: New session '2' of user 'core' with class 'user-light' and type 'tty'. Oct 21 05:06:06.167697 systemd-logind[2513]: New session '1' of user 'core' with class 'user-light' and type 'tty'. Oct 21 05:06:06.220891 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Oct 21 05:06:06.223973 systemd[1]: Started session-1.scope - Session 1 of User core. Oct 21 05:06:06.224584 systemd[1]: Started session-2.scope - Session 2 of User core. Oct 21 05:06:06.773904 systemd[1]: Started sshd@1-4097-10.0.0.11:22-109.160.32.128:53720.service - OpenSSH per-connection server daemon (109.160.32.128:53720). Oct 21 05:06:07.095992 sshd[2673]: Connection closed by authenticating user root 109.160.32.128 port 53720 [preauth] Oct 21 05:06:07.097291 systemd[1]: sshd@1-4097-10.0.0.11:22-109.160.32.128:53720.service: Deactivated successfully. Oct 21 05:06:10.135599 containerd[2539]: time="2026-10-21T05:06:10Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Oct 21 05:06:10.136703 containerd[2539]: time="2026-10-21T05:06:10.136047755Z" level=info msg="starting containerd" revision=e53c7c1516c3b2bff98eb76f1f4117477e6f4e66 version=v2.2.5 Oct 21 05:06:10.145904 containerd[2539]: time="2026-10-21T05:06:10.145870523Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="6.651µs" Oct 21 05:06:10.145904 containerd[2539]: time="2026-10-21T05:06:10.145895939Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Oct 21 05:06:10.145985 containerd[2539]: time="2026-10-21T05:06:10.145928095Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Oct 21 05:06:10.145985 containerd[2539]: time="2026-10-21T05:06:10.145937838Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Oct 21 05:06:10.146064 containerd[2539]: time="2026-10-21T05:06:10.146050318Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Oct 21 05:06:10.146095 containerd[2539]: time="2026-10-21T05:06:10.146067936Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 Oct 21 05:06:10.146095 containerd[2539]: time="2026-10-21T05:06:10.146078099Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146130 containerd[2539]: time="2026-10-21T05:06:10.146122102Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146148 containerd[2539]: time="2026-10-21T05:06:10.146130701Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146305 containerd[2539]: time="2026-10-21T05:06:10.146290468Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146305 containerd[2539]: time="2026-10-21T05:06:10.146301068Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146348 containerd[2539]: time="2026-10-21T05:06:10.146310568Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Oct 21 05:06:10.146348 containerd[2539]: time="2026-10-21T05:06:10.146319616Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.147062 containerd[2539]: time="2026-10-21T05:06:10.146469622Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Oct 21 05:06:10.147062 containerd[2539]: time="2026-10-21T05:06:10.146514890Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.147062 containerd[2539]: time="2026-10-21T05:06:10.146984455Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.147062 containerd[2539]: time="2026-10-21T05:06:10.147012614Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Oct 21 05:06:10.147062 containerd[2539]: time="2026-10-21T05:06:10.147023623Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Oct 21 05:06:10.147194 containerd[2539]: time="2026-10-21T05:06:10.147180177Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Oct 21 05:06:10.147514 containerd[2539]: time="2026-10-21T05:06:10.147496355Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Oct 21 05:06:10.147591 containerd[2539]: time="2026-10-21T05:06:10.147579364Z" level=info msg="metadata content store policy set" policy=shared Oct 21 05:06:10.163391 containerd[2539]: time="2026-10-21T05:06:10.163364330Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Oct 21 05:06:10.163446 containerd[2539]: time="2026-10-21T05:06:10.163402241Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Oct 21 05:06:10.163446 containerd[2539]: time="2026-10-21T05:06:10.163427900Z" level=info msg="built-in NRI default validator is disabled" Oct 21 05:06:10.163446 containerd[2539]: time="2026-10-21T05:06:10.163435258Z" level=info msg="runtime interface created" Oct 21 05:06:10.163446 containerd[2539]: time="2026-10-21T05:06:10.163439686Z" level=info msg="created NRI interface" Oct 21 05:06:10.163515 containerd[2539]: time="2026-10-21T05:06:10.163453966Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Oct 21 05:06:10.211828 containerd[2539]: time="2026-10-21T05:06:10.211774706Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 Oct 21 05:06:10.211927 containerd[2539]: time="2026-10-21T05:06:10.211903493Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Oct 21 05:06:10.211957 containerd[2539]: time="2026-10-21T05:06:10.211932187Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Oct 21 05:06:10.211957 containerd[2539]: time="2026-10-21T05:06:10.211948407Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Oct 21 05:06:10.211993 containerd[2539]: time="2026-10-21T05:06:10.211963672Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Oct 21 05:06:10.211993 containerd[2539]: time="2026-10-21T05:06:10.211972530Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Oct 21 05:06:10.211993 containerd[2539]: time="2026-10-21T05:06:10.211982071Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Oct 21 05:06:10.212041 containerd[2539]: time="2026-10-21T05:06:10.211995322Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Oct 21 05:06:10.212041 containerd[2539]: time="2026-10-21T05:06:10.212005395Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Oct 21 05:06:10.212041 containerd[2539]: time="2026-10-21T05:06:10.212015945Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Oct 21 05:06:10.212041 containerd[2539]: time="2026-10-21T05:06:10.212024317Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Oct 21 05:06:10.212041 containerd[2539]: time="2026-10-21T05:06:10.212034041Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Oct 21 05:06:10.212130 containerd[2539]: time="2026-10-21T05:06:10.212111455Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Oct 21 05:06:10.212130 containerd[2539]: time="2026-10-21T05:06:10.212127094Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Oct 21 05:06:10.212167 containerd[2539]: time="2026-10-21T05:06:10.212137531Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Oct 21 05:06:10.212167 containerd[2539]: time="2026-10-21T05:06:10.212148457Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Oct 21 05:06:10.212167 containerd[2539]: time="2026-10-21T05:06:10.212158842Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Oct 21 05:06:10.212216 containerd[2539]: time="2026-10-21T05:06:10.212171355Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Oct 21 05:06:10.212216 containerd[2539]: time="2026-10-21T05:06:10.212181324Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Oct 21 05:06:10.212216 containerd[2539]: time="2026-10-21T05:06:10.212190099Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Oct 21 05:06:10.212216 containerd[2539]: time="2026-10-21T05:06:10.212201344Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 Oct 21 05:06:10.212216 containerd[2539]: time="2026-10-21T05:06:10.212213209Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Oct 21 05:06:10.212301 containerd[2539]: time="2026-10-21T05:06:10.212225472Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Oct 21 05:06:10.212301 containerd[2539]: time="2026-10-21T05:06:10.212234262Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Oct 21 05:06:10.212301 containerd[2539]: time="2026-10-21T05:06:10.212257604Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Oct 21 05:06:10.212301 containerd[2539]: time="2026-10-21T05:06:10.212294561Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Oct 21 05:06:10.212366 containerd[2539]: time="2026-10-21T05:06:10.212305755Z" level=info msg="Start snapshots syncer" Oct 21 05:06:10.212366 containerd[2539]: time="2026-10-21T05:06:10.212327924Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Oct 21 05:06:10.213027 containerd[2539]: time="2026-10-21T05:06:10.212988447Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Oct 21 05:06:10.213171 containerd[2539]: time="2026-10-21T05:06:10.213039894Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Oct 21 05:06:10.213868 containerd[2539]: time="2026-10-21T05:06:10.213823648Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Oct 21 05:06:10.213961 containerd[2539]: time="2026-10-21T05:06:10.213940077Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.213967934Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.213982141Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.213991625Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.214002708Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.214013936Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Oct 21 05:06:10.214049 containerd[2539]: time="2026-10-21T05:06:10.214023717Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Oct 21 05:06:10.214765 containerd[2539]: time="2026-10-21T05:06:10.214747377Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Oct 21 05:06:10.214825 containerd[2539]: time="2026-10-21T05:06:10.214766057Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Oct 21 05:06:10.214825 containerd[2539]: time="2026-10-21T05:06:10.214796011Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Oct 21 05:06:10.214825 containerd[2539]: time="2026-10-21T05:06:10.214809123Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Oct 21 05:06:10.214825 containerd[2539]: time="2026-10-21T05:06:10.214818818Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214828702Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214835838Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214844721Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214856378Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214867533Z" level=info msg="Connect containerd service" Oct 21 05:06:10.214922 containerd[2539]: time="2026-10-21T05:06:10.214893165Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Oct 21 05:06:10.215556 containerd[2539]: time="2026-10-21T05:06:10.215529600Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 21 05:06:11.614823 containerd[2539]: time="2026-10-21T05:06:11.614756432Z" level=info msg="Start subscribing containerd event" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615285758Z" level=info msg="Start recovering state" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615388022Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615425601Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615469239Z" level=info msg="Start event monitor" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615481528Z" level=info msg="Start cni network conf syncer for default" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615503657Z" level=info msg="Start streaming server" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615517396Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615524143Z" level=info msg="runtime interface starting up..." Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615529502Z" level=info msg="starting plugins..." Oct 21 05:06:11.615626 containerd[2539]: time="2026-10-21T05:06:11.615540751Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Oct 21 05:06:11.618039 containerd[2539]: time="2026-10-21T05:06:11.616417480Z" level=info msg="containerd successfully booted in 1.481015s" Oct 21 05:06:11.616629 systemd[1]: Started containerd.service - containerd container runtime. Oct 21 05:06:11.619912 systemd[1]: Starting docker.service - Docker Application Container Engine... Oct 21 05:06:11.633608 (dockerd)[2723]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Oct 21 05:06:11.748931 systemd[1]: Started sshd@2-4098-10.0.0.11:22-109.160.32.128:53802.service - OpenSSH per-connection server daemon (109.160.32.128:53802). Oct 21 05:06:11.811948 sshd[2727]: Invalid user vps from 109.160.32.128 port 53802 Oct 21 05:06:11.824708 sshd[2727]: Connection closed by invalid user vps 109.160.32.128 port 53802 [preauth] Oct 21 05:06:11.825937 systemd[1]: sshd@2-4098-10.0.0.11:22-109.160.32.128:53802.service: Deactivated successfully. Oct 21 05:06:15.973574 waagent[2599]: 2026-10-21T05:06:15.973505Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4 Oct 21 05:06:15.974981 waagent[2599]: 2026-10-21T05:06:15.974904Z INFO Daemon Daemon OS: flatcar 4757.2.2 Oct 21 05:06:15.975951 waagent[2599]: 2026-10-21T05:06:15.975891Z INFO Daemon Daemon Python: 3.12.13 Oct 21 05:06:15.977528 waagent[2599]: 2026-10-21T05:06:15.976947Z INFO Daemon Daemon Run daemon Oct 21 05:06:15.978297 waagent[2599]: 2026-10-21T05:06:15.978143Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4757.2.2' Oct 21 05:06:15.980111 waagent[2599]: 2026-10-21T05:06:15.980074Z INFO Daemon Daemon Using waagent for provisioning Oct 21 05:06:15.981278 waagent[2599]: 2026-10-21T05:06:15.981248Z INFO Daemon Daemon Activate resource disk Oct 21 05:06:15.982205 waagent[2599]: 2026-10-21T05:06:15.982146Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 21 05:06:15.984729 waagent[2599]: 2026-10-21T05:06:15.984694Z INFO Daemon Daemon Found device: None Oct 21 05:06:15.985605 waagent[2599]: 2026-10-21T05:06:15.985578Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 21 05:06:15.987179 waagent[2599]: 2026-10-21T05:06:15.987149Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 21 05:06:15.990153 waagent[2599]: 2026-10-21T05:06:15.990110Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 21 05:06:15.991275 waagent[2599]: 2026-10-21T05:06:15.991246Z INFO Daemon Daemon Running default provisioning handler Oct 21 05:06:15.996965 waagent[2599]: 2026-10-21T05:06:15.996621Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4. Oct 21 05:06:15.997209 waagent[2599]: 2026-10-21T05:06:15.997181Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 21 05:06:15.997530 waagent[2599]: 2026-10-21T05:06:15.997508Z INFO Daemon Daemon cloud-init is enabled: False Oct 21 05:06:15.997810 waagent[2599]: 2026-10-21T05:06:15.997792Z INFO Daemon Daemon Copying ovf-env.xml Oct 21 05:06:16.324952 waagent[2599]: 2026-10-21T05:06:16.324855Z INFO Daemon Daemon Successfully mounted dvd Oct 21 05:06:16.465228 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 21 05:06:16.466389 waagent[2599]: 2026-10-21T05:06:16.466338Z INFO Daemon Daemon Detect protocol endpoint Oct 21 05:06:16.468708 waagent[2599]: 2026-10-21T05:06:16.466540Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 21 05:06:16.468708 waagent[2599]: 2026-10-21T05:06:16.466921Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 21 05:06:16.468708 waagent[2599]: 2026-10-21T05:06:16.467116Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 21 05:06:16.468708 waagent[2599]: 2026-10-21T05:06:16.467278Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 21 05:06:16.468708 waagent[2599]: 2026-10-21T05:06:16.467443Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 21 05:06:16.521846 waagent[2599]: 2026-10-21T05:06:16.521815Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 21 05:06:16.522168 waagent[2599]: 2026-10-21T05:06:16.522131Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 21 05:06:16.523616 waagent[2599]: 2026-10-21T05:06:16.522203Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 21 05:06:16.799925 systemd[1]: Started sshd@3-4099-10.0.0.11:22-109.160.32.128:39718.service - OpenSSH per-connection server daemon (109.160.32.128:39718). Oct 21 05:06:16.855378 waagent[2599]: 2026-10-21T05:06:16.855325Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 21 05:06:16.856489 waagent[2599]: 2026-10-21T05:06:16.855529Z INFO Daemon Daemon Forcing an update of the goal state. Oct 21 05:06:16.860447 waagent[2599]: 2026-10-21T05:06:16.860413Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 21 05:06:16.872216 waagent[2599]: 2026-10-21T05:06:16.872185Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.190 Oct 21 05:06:16.873527 waagent[2599]: 2026-10-21T05:06:16.873495Z INFO Daemon Oct 21 05:06:16.874216 waagent[2599]: 2026-10-21T05:06:16.874190Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 04766a2d-9bb8-412b-943f-76e28ca227fd eTag: 15091455197190586757 source: Fabric] Oct 21 05:06:16.876272 waagent[2599]: 2026-10-21T05:06:16.876245Z INFO Daemon The vmSettings originated via Fabric; will ignore them. Oct 21 05:06:16.877758 waagent[2599]: 2026-10-21T05:06:16.877731Z INFO Daemon Oct 21 05:06:16.878363 waagent[2599]: 2026-10-21T05:06:16.878308Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1] Oct 21 05:06:16.882071 waagent[2599]: 2026-10-21T05:06:16.882046Z INFO Daemon Daemon Downloading artifacts profile blob Oct 21 05:06:16.947942 waagent[2599]: 2026-10-21T05:06:16.947899Z INFO Daemon Downloaded certificate {'thumbprint': '517452E4B410F85840BEC4AC2E64E6B8AB8F2940', 'hasPrivateKey': True} Oct 21 05:06:16.950600 waagent[2599]: 2026-10-21T05:06:16.948324Z INFO Daemon Fetch goal state completed Oct 21 05:06:16.953192 waagent[2599]: 2026-10-21T05:06:16.953159Z INFO Daemon Daemon Starting provisioning Oct 21 05:06:16.954251 waagent[2599]: 2026-10-21T05:06:16.953335Z INFO Daemon Daemon Handle ovf-env.xml. Oct 21 05:06:16.954251 waagent[2599]: 2026-10-21T05:06:16.953534Z INFO Daemon Daemon Set hostname [ci-4757.2.2-a-365c1c1670] Oct 21 05:06:17.010438 waagent[2599]: 2026-10-21T05:06:17.010382Z INFO Daemon Daemon Publish hostname [ci-4757.2.2-a-365c1c1670] Oct 21 05:06:17.016075 waagent[2599]: 2026-10-21T05:06:17.010693Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 21 05:06:17.016075 waagent[2599]: 2026-10-21T05:06:17.010894Z INFO Daemon Daemon Primary interface is [eth0] Oct 21 05:06:17.017024 systemd-networkd[2307]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 21 05:06:17.017032 systemd-networkd[2307]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network. Oct 21 05:06:17.017053 systemd-networkd[2307]: eth0: DHCP lease lost Oct 21 05:06:17.032196 waagent[2599]: 2026-10-21T05:06:17.032153Z INFO Daemon Daemon Create user account if not exists Oct 21 05:06:17.032487 waagent[2599]: 2026-10-21T05:06:17.032362Z INFO Daemon Daemon User core already exists, skip useradd Oct 21 05:06:17.035775 waagent[2599]: 2026-10-21T05:06:17.032498Z INFO Daemon Daemon Configure sudoer Oct 21 05:06:17.035775 waagent[2599]: 2026-10-21T05:06:17.032769Z INFO Daemon Daemon Configure sshd Oct 21 05:06:17.035775 waagent[2599]: 2026-10-21T05:06:17.033147Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive. Oct 21 05:06:17.035775 waagent[2599]: 2026-10-21T05:06:17.033283Z INFO Daemon Daemon Deploy ssh public key. Oct 21 05:06:17.045712 systemd-networkd[2307]: eth0: DHCPv4 address 10.0.0.11/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 21 05:06:17.108667 sshd[2750]: Invalid user admin from 109.160.32.128 port 39718 Oct 21 05:06:17.144683 sshd[2750]: Connection closed by invalid user admin 109.160.32.128 port 39718 [preauth] Oct 21 05:06:17.146184 systemd[1]: sshd@3-4099-10.0.0.11:22-109.160.32.128:39718.service: Deactivated successfully. Oct 21 05:06:17.166757 waagent[2599]: 2026-10-21T05:06:17.166708Z INFO Daemon Daemon Provisioning complete Oct 21 05:06:17.173913 waagent[2599]: 2026-10-21T05:06:17.173884Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 21 05:06:17.174200 waagent[2599]: 2026-10-21T05:06:17.174040Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 21 05:06:17.174200 waagent[2599]: 2026-10-21T05:06:17.174241Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent Oct 21 05:06:17.278234 waagent[2766]: 2026-10-21T05:06:17.278179Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4) Oct 21 05:06:17.278492 waagent[2766]: 2026-10-21T05:06:17.278274Z INFO ExtHandler ExtHandler OS: flatcar 4757.2.2 Oct 21 05:06:17.278492 waagent[2766]: 2026-10-21T05:06:17.278327Z INFO ExtHandler ExtHandler Python: 3.12.13 Oct 21 05:06:17.278492 waagent[2766]: 2026-10-21T05:06:17.278366Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Oct 21 05:06:17.385223 waagent[2766]: 2026-10-21T05:06:17.385174Z INFO ExtHandler ExtHandler Distro: flatcar-4757.2.2; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.13; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0; Oct 21 05:06:17.385366 waagent[2766]: 2026-10-21T05:06:17.385336Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 21 05:06:17.385432 waagent[2766]: 2026-10-21T05:06:17.385404Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 21 05:06:17.392631 waagent[2766]: 2026-10-21T05:06:17.392591Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 21 05:06:17.399424 waagent[2766]: 2026-10-21T05:06:17.399394Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.190 Oct 21 05:06:17.399757 waagent[2766]: 2026-10-21T05:06:17.399733Z INFO ExtHandler Oct 21 05:06:17.399819 waagent[2766]: 2026-10-21T05:06:17.399793Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: b634a687-f47f-43a8-916a-0d3cb893e8b9 eTag: 15091455197190586757 source: Fabric] Oct 21 05:06:17.400585 waagent[2766]: 2026-10-21T05:06:17.400032Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 21 05:06:17.400585 waagent[2766]: 2026-10-21T05:06:17.400451Z INFO ExtHandler Oct 21 05:06:17.400585 waagent[2766]: 2026-10-21T05:06:17.400495Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 21 05:06:17.404542 waagent[2766]: 2026-10-21T05:06:17.404514Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 21 05:06:17.464639 waagent[2766]: 2026-10-21T05:06:17.464595Z INFO ExtHandler Downloaded certificate {'thumbprint': '517452E4B410F85840BEC4AC2E64E6B8AB8F2940', 'hasPrivateKey': True} Oct 21 05:06:17.464963 waagent[2766]: 2026-10-21T05:06:17.464936Z INFO ExtHandler Fetch goal state completed Oct 21 05:06:17.474329 waagent[2766]: 2026-10-21T05:06:17.474289Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.9 29 Sep 2026 (Library: OpenSSL 3.5.9 29 Sep 2026) Oct 21 05:06:17.477100 waagent[2766]: 2026-10-21T05:06:17.477059Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2766 Oct 21 05:06:17.477198 waagent[2766]: 2026-10-21T05:06:17.477175Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ******** Oct 21 05:06:17.477432 waagent[2766]: 2026-10-21T05:06:17.477410Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ******** Oct 21 05:06:17.478394 waagent[2766]: 2026-10-21T05:06:17.478362Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4757.2.2', '', 'Flatcar Container Linux by Kinvolk'] Oct 21 05:06:17.478667 waagent[2766]: 2026-10-21T05:06:17.478631Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4757.2.2', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Oct 21 05:06:17.478752 waagent[2766]: 2026-10-21T05:06:17.478733Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Oct 21 05:06:17.479114 waagent[2766]: 2026-10-21T05:06:17.479092Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 21 05:06:17.586735 waagent[2766]: 2026-10-21T05:06:17.586705Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 21 05:06:17.586864 waagent[2766]: 2026-10-21T05:06:17.586842Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 21 05:06:17.591242 waagent[2766]: 2026-10-21T05:06:17.590909Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 21 05:06:17.595188 systemd[1]: Reload requested from client PID 2781 ('systemctl') (unit waagent.service)... Oct 21 05:06:17.595201 systemd[1]: Reloading... Oct 21 05:06:17.665722 zram_generator::config[2837]: No configuration found. Oct 21 05:06:17.883307 systemd[1]: Reloading finished in 287 ms. Oct 21 05:06:17.904400 waagent[2766]: 2026-10-21T05:06:17.903084Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service Oct 21 05:06:17.904400 waagent[2766]: 2026-10-21T05:06:17.903201Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully Oct 21 05:06:18.338026 dockerd[2723]: time="2026-10-21T05:06:18.337691500Z" level=info msg="Starting up" Oct 21 05:06:18.340006 dockerd[2723]: time="2026-10-21T05:06:18.339599054Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Oct 21 05:06:18.354560 dockerd[2723]: time="2026-10-21T05:06:18.354522637Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Oct 21 05:06:18.514230 waagent[2766]: 2026-10-21T05:06:18.514168Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 21 05:06:18.514544 waagent[2766]: 2026-10-21T05:06:18.514512Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Oct 21 05:06:18.515184 waagent[2766]: 2026-10-21T05:06:18.515147Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 21 05:06:18.515512 waagent[2766]: 2026-10-21T05:06:18.515477Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 21 05:06:18.515784 waagent[2766]: 2026-10-21T05:06:18.515741Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 21 05:06:18.516043 waagent[2766]: 2026-10-21T05:06:18.515884Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 21 05:06:18.516159 waagent[2766]: 2026-10-21T05:06:18.516130Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 21 05:06:18.516267 waagent[2766]: 2026-10-21T05:06:18.516249Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 21 05:06:18.516504 waagent[2766]: 2026-10-21T05:06:18.516482Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 21 05:06:18.516535 waagent[2766]: 2026-10-21T05:06:18.516520Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 21 05:06:18.516594 waagent[2766]: 2026-10-21T05:06:18.516574Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 21 05:06:18.516799 waagent[2766]: 2026-10-21T05:06:18.516773Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 21 05:06:18.517276 waagent[2766]: 2026-10-21T05:06:18.517253Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 21 05:06:18.517493 waagent[2766]: 2026-10-21T05:06:18.517472Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 21 05:06:18.517493 waagent[2766]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 21 05:06:18.517493 waagent[2766]: eth0 00000000 0100000A 0003 0 0 1024 00000000 0 0 0 Oct 21 05:06:18.517493 waagent[2766]: eth0 0000000A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 21 05:06:18.517493 waagent[2766]: eth0 0100000A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 21 05:06:18.517493 waagent[2766]: eth0 10813FA8 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 21 05:06:18.517493 waagent[2766]: eth0 FEA9FEA9 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 21 05:06:18.518855 waagent[2766]: 2026-10-21T05:06:18.518831Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 21 05:06:18.519004 waagent[2766]: 2026-10-21T05:06:18.518979Z INFO EnvHandler ExtHandler Configure routes Oct 21 05:06:18.519070 waagent[2766]: 2026-10-21T05:06:18.519038Z INFO EnvHandler ExtHandler Gateway:None Oct 21 05:06:18.519114 waagent[2766]: 2026-10-21T05:06:18.519096Z INFO EnvHandler ExtHandler Routes:None Oct 21 05:06:18.522443 waagent[2766]: 2026-10-21T05:06:18.522415Z INFO ExtHandler ExtHandler Oct 21 05:06:18.522760 waagent[2766]: 2026-10-21T05:06:18.522736Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: cdb58190-0104-48bc-80dd-97285b63a505 correlation c8e13959-01ff-4c91-ac36-4f8f7b0679a3 created: 2026-10-21T05:04:52.913200Z] Oct 21 05:06:18.524125 waagent[2766]: 2026-10-21T05:06:18.524099Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 21 05:06:18.524506 waagent[2766]: 2026-10-21T05:06:18.524483Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] Oct 21 05:06:18.547672 waagent[2766]: 2026-10-21T05:06:18.547552Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: E3AF87BA-F97B-4A08-967E-ADD1A4EA7F79;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;] Oct 21 05:06:18.604758 waagent[2766]: 2026-10-21T05:06:18.604685Z INFO MonitorHandler ExtHandler Network interfaces: Oct 21 05:06:18.604758 waagent[2766]: Executing ['ip', '-a', '-o', 'link']: Oct 21 05:06:18.604758 waagent[2766]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 21 05:06:18.604758 waagent[2766]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:2d:ce:99 brd ff:ff:ff:ff:ff:ff\ alias Network Device\ altname enx7c1e522dce99 Oct 21 05:06:18.604758 waagent[2766]: 3: enP30832s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:1e:52:2d:ce:99 brd ff:ff:ff:ff:ff:ff\ altname enP30832p0s0\ altname enp0s0\ altname ens1 Oct 21 05:06:18.604758 waagent[2766]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 21 05:06:18.604758 waagent[2766]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 21 05:06:18.604758 waagent[2766]: 2: eth0 inet 10.0.0.11/24 metric 1024 brd 10.0.0.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 21 05:06:18.604758 waagent[2766]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 21 05:06:18.604758 waagent[2766]: 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever Oct 21 05:06:18.604758 waagent[2766]: 2: eth0 inet6 fe80::7e1e:52ff:fe2d:ce99/64 scope link proto kernel_ll \ valid_lft forever preferred_lft forever Oct 21 05:06:18.635216 waagent[2766]: 2026-10-21T05:06:18.635175Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Oct 21 05:06:18.635216 waagent[2766]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 21 05:06:18.635216 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.635216 waagent[2766]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 21 05:06:18.635216 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.635216 waagent[2766]: Chain OUTPUT (policy ACCEPT 3 packets, 164 bytes) Oct 21 05:06:18.635216 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.635216 waagent[2766]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 21 05:06:18.635216 waagent[2766]: 11 1299 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 21 05:06:18.635216 waagent[2766]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 21 05:06:18.637668 waagent[2766]: 2026-10-21T05:06:18.637618Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 21 05:06:18.637668 waagent[2766]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 21 05:06:18.637668 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.637668 waagent[2766]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 21 05:06:18.637668 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.637668 waagent[2766]: Chain OUTPUT (policy ACCEPT 4 packets, 224 bytes) Oct 21 05:06:18.637668 waagent[2766]: pkts bytes target prot opt in out source destination Oct 21 05:06:18.637668 waagent[2766]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 21 05:06:18.637668 waagent[2766]: 12 1351 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 21 05:06:18.637668 waagent[2766]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 21 05:06:18.902607 dockerd[2723]: time="2026-10-21T05:06:18.902571484Z" level=info msg="Loading containers: start." Oct 21 05:06:18.942668 kernel: Initializing XFRM netlink socket Oct 21 05:06:19.266224 systemd-networkd[2307]: docker0: Link UP Oct 21 05:06:19.284020 dockerd[2723]: time="2026-10-21T05:06:19.283988938Z" level=info msg="Loading containers: done." Oct 21 05:06:19.521842 dockerd[2723]: time="2026-10-21T05:06:19.521779151Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 21 05:06:19.522186 dockerd[2723]: time="2026-10-21T05:06:19.521865699Z" level=info msg="Docker daemon" commit=45873be4ae3f5488c9498b3d9f17deaddaf609f4 containerd-snapshotter=false storage-driver=overlay2 version=28.2.2 Oct 21 05:06:19.522186 dockerd[2723]: time="2026-10-21T05:06:19.522014864Z" level=info msg="Initializing buildkit" Oct 21 05:06:19.548326 dockerd[2723]: time="2026-10-21T05:06:19.548301727Z" level=warning msg="CDI setup error /etc/cdi: failed to monitor for changes: no such file or directory" Oct 21 05:06:19.548326 dockerd[2723]: time="2026-10-21T05:06:19.548319647Z" level=warning msg="CDI setup error /var/run/cdi: failed to monitor for changes: no such file or directory" Oct 21 05:06:19.581275 dockerd[2723]: time="2026-10-21T05:06:19.581239993Z" level=info msg="Completed buildkit initialization" Oct 21 05:06:19.587274 dockerd[2723]: time="2026-10-21T05:06:19.587249165Z" level=info msg="Daemon has completed initialization" Oct 21 05:06:19.588014 dockerd[2723]: time="2026-10-21T05:06:19.587281046Z" level=info msg="API listen on /run/docker.sock" Oct 21 05:06:19.587560 systemd[1]: Started docker.service - Docker Application Container Engine. Oct 21 05:06:19.589813 etcd-wrapper[2644]: Error response from daemon: No such container: etcd-member Oct 21 05:06:19.599758 etcd-wrapper[3108]: Error response from daemon: No such container: etcd-member Oct 21 05:06:19.774935 etcd-wrapper[3128]: Unable to find image 'quay.io/coreos/etcd:v3.5.24' locally Oct 21 05:06:20.972314 etcd-wrapper[3128]: v3.5.24: Pulling from coreos/etcd Oct 21 05:06:21.294369 etcd-wrapper[3128]: 804c8aba2cc6: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 2ae710cd8bfe: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: d462aa345367: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 0f8b424aa0b9: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: d557676654e5: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: c8022d07192e: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: d858cbc252ad: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 1069fc2daed1: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: b40161cd83fc: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 5318d93a3a65: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 307c1adadb60: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 49a553fa7ab9: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 9cde5f0af3dd: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: b9581a18c15b: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: 95c11f3cd524: Pulling fs layer Oct 21 05:06:21.294369 etcd-wrapper[3128]: ed40c9b2e219: Pulling fs layer Oct 21 05:06:21.295164 etcd-wrapper[3128]: b40161cd83fc: Waiting Oct 21 05:06:21.295164 etcd-wrapper[3128]: 5318d93a3a65: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 307c1adadb60: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 0f8b424aa0b9: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 49a553fa7ab9: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 9cde5f0af3dd: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: d557676654e5: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: c8022d07192e: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: d858cbc252ad: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: b9581a18c15b: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 1069fc2daed1: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: 95c11f3cd524: Waiting Oct 21 05:06:21.295232 etcd-wrapper[3128]: ed40c9b2e219: Waiting Oct 21 05:06:21.601223 etcd-wrapper[3128]: 2ae710cd8bfe: Verifying Checksum Oct 21 05:06:21.601223 etcd-wrapper[3128]: 2ae710cd8bfe: Download complete Oct 21 05:06:21.602192 etcd-wrapper[3128]: 804c8aba2cc6: Verifying Checksum Oct 21 05:06:21.602192 etcd-wrapper[3128]: 804c8aba2cc6: Download complete Oct 21 05:06:21.640624 systemd[1]: Started sshd@4-4100-10.0.0.11:22-109.160.32.128:39824.service - OpenSSH per-connection server daemon (109.160.32.128:39824). Oct 21 05:06:21.656044 etcd-wrapper[3128]: d462aa345367: Verifying Checksum Oct 21 05:06:21.656044 etcd-wrapper[3128]: d462aa345367: Download complete Oct 21 05:06:21.667948 etcd-wrapper[3128]: 804c8aba2cc6: Pull complete Oct 21 05:06:21.699192 systemd[1]: var-lib-docker-overlay2-4a5b04e3aed19d827adf978a12c05b275ed616a0291f855bf8fd6847fb10f0cf-merged.mount: Deactivated successfully. Oct 21 05:06:21.718054 sshd[3142]: Invalid user root1 from 109.160.32.128 port 39824 Oct 21 05:06:21.730115 sshd[3142]: Connection closed by invalid user root1 109.160.32.128 port 39824 [preauth] Oct 21 05:06:21.731089 systemd[1]: sshd@4-4100-10.0.0.11:22-109.160.32.128:39824.service: Deactivated successfully. Oct 21 05:06:21.878098 etcd-wrapper[3128]: 0f8b424aa0b9: Verifying Checksum Oct 21 05:06:21.878098 etcd-wrapper[3128]: 0f8b424aa0b9: Download complete Oct 21 05:06:21.897102 etcd-wrapper[3128]: d557676654e5: Download complete Oct 21 05:06:21.926282 etcd-wrapper[3128]: c8022d07192e: Download complete Oct 21 05:06:21.960823 etcd-wrapper[3128]: 2ae710cd8bfe: Pull complete Oct 21 05:06:22.158355 etcd-wrapper[3128]: d858cbc252ad: Verifying Checksum Oct 21 05:06:22.158606 etcd-wrapper[3128]: d858cbc252ad: Download complete Oct 21 05:06:22.206223 systemd[1]: var-lib-docker-overlay2-c319eecf7110f80d1b5409266ed28f6c7341e99141c73c01497cbd4fe1ccd969-merged.mount: Deactivated successfully. Oct 21 05:06:22.208350 etcd-wrapper[3128]: b40161cd83fc: Verifying Checksum Oct 21 05:06:22.208350 etcd-wrapper[3128]: b40161cd83fc: Download complete Oct 21 05:06:22.210980 etcd-wrapper[3128]: 1069fc2daed1: Verifying Checksum Oct 21 05:06:22.211133 etcd-wrapper[3128]: 1069fc2daed1: Download complete Oct 21 05:06:22.436374 etcd-wrapper[3128]: 5318d93a3a65: Verifying Checksum Oct 21 05:06:22.436471 etcd-wrapper[3128]: 5318d93a3a65: Download complete Oct 21 05:06:22.494890 etcd-wrapper[3128]: 307c1adadb60: Download complete Oct 21 05:06:22.556979 etcd-wrapper[3128]: 49a553fa7ab9: Verifying Checksum Oct 21 05:06:22.556979 etcd-wrapper[3128]: 49a553fa7ab9: Download complete Oct 21 05:06:22.836171 etcd-wrapper[3128]: 95c11f3cd524: Verifying Checksum Oct 21 05:06:22.836171 etcd-wrapper[3128]: 95c11f3cd524: Download complete Oct 21 05:06:22.882298 etcd-wrapper[3128]: b9581a18c15b: Verifying Checksum Oct 21 05:06:22.882298 etcd-wrapper[3128]: b9581a18c15b: Download complete Oct 21 05:06:22.898575 etcd-wrapper[3128]: 9cde5f0af3dd: Verifying Checksum Oct 21 05:06:22.898575 etcd-wrapper[3128]: 9cde5f0af3dd: Download complete Oct 21 05:06:23.077793 etcd-wrapper[3128]: d462aa345367: Pull complete Oct 21 05:06:23.105891 systemd[1]: var-lib-docker-overlay2-498db49d9ed7194480730cbbbe4c59d21e444df86f40da662143c9bcc96f6fd3-merged.mount: Deactivated successfully. Oct 21 05:06:23.370828 etcd-wrapper[3128]: ed40c9b2e219: Download complete Oct 21 05:06:23.416590 etcd-wrapper[3128]: 0f8b424aa0b9: Pull complete Oct 21 05:06:23.443741 systemd[1]: var-lib-docker-overlay2-77edf973aa2550e5d86a59b42317a3f20c3c512405b7a3758134aa15787ef025-merged.mount: Deactivated successfully. Oct 21 05:06:23.558118 etcd-wrapper[3128]: d557676654e5: Pull complete Oct 21 05:06:23.706901 etcd-wrapper[3128]: c8022d07192e: Pull complete Oct 21 05:06:23.829431 etcd-wrapper[3128]: d858cbc252ad: Pull complete Oct 21 05:06:23.947775 etcd-wrapper[3128]: 1069fc2daed1: Pull complete Oct 21 05:06:24.073365 etcd-wrapper[3128]: b40161cd83fc: Pull complete Oct 21 05:06:24.102074 systemd[1]: var-lib-docker-overlay2-1930894a56e9832ca2df7d36d72035c0dbfc1fdfb5a14899e9b24f13ed4c5f01-merged.mount: Deactivated successfully. Oct 21 05:06:24.203681 etcd-wrapper[3128]: 5318d93a3a65: Pull complete Oct 21 05:06:24.229100 chronyd[2494]: Selected source PHC0 Oct 21 05:06:24.229506 systemd[1]: var-lib-docker-overlay2-f54c7e02108ea39bf66eec45b829ed0e545d33df8b24023ec4d1a45fdec24d6c-merged.mount: Deactivated successfully. Oct 21 05:06:24.364596 etcd-wrapper[3128]: 307c1adadb60: Pull complete Oct 21 05:06:24.527320 systemd[1]: var-lib-docker-overlay2-6ceb05297e810a0b60c609144c156ff87213fd25997a4723b71cd7e13f78fe86-merged.mount: Deactivated successfully. Oct 21 05:06:25.268323 etcd-wrapper[3128]: 49a553fa7ab9: Pull complete Oct 21 05:06:25.399871 systemd[1]: var-lib-docker-overlay2-17db1b44d3a33daa2aff763002892dd2ead333fd702ec59084daeca0a9f42826-merged.mount: Deactivated successfully. Oct 21 05:06:25.900017 etcd-wrapper[3128]: 9cde5f0af3dd: Pull complete Oct 21 05:06:26.019971 systemd[1]: var-lib-docker-overlay2-adb1cf622877b314b3797b90a9acdb3dc9de5571b2341e5cc6225c42639ef157-merged.mount: Deactivated successfully. Oct 21 05:06:26.408214 etcd-wrapper[3128]: b9581a18c15b: Pull complete Oct 21 05:06:26.435173 systemd[1]: var-lib-docker-overlay2-8f39e760fd6fad3eca15b5abb65de8f29968c4f8cd6de64f82a391c18e4e432b-merged.mount: Deactivated successfully. Oct 21 05:06:26.535097 etcd-wrapper[3128]: 95c11f3cd524: Pull complete Oct 21 05:06:26.568362 systemd[1]: var-lib-docker-overlay2-7aaefdb52bc061c59c39742f74c25b87c84fe3f53709f5e1ab4cb69eb6d253b3-merged.mount: Deactivated successfully. Oct 21 05:06:26.685667 etcd-wrapper[3128]: ed40c9b2e219: Pull complete Oct 21 05:06:26.706073 systemd[1]: Started sshd@5-2-10.0.0.11:22-109.160.32.128:59432.service - OpenSSH per-connection server daemon (109.160.32.128:59432). Oct 21 05:06:26.715044 etcd-wrapper[3128]: Digest: sha256:a193bdd3c1d1d11de961b6600231b2b3b4c4e092848dbb7d4c0e03b709ac7594 Oct 21 05:06:26.724524 etcd-wrapper[3128]: Status: Downloaded newer image for quay.io/coreos/etcd:v3.5.24 Oct 21 05:06:26.801029 sshd[3221]: Invalid user ubuntu from 109.160.32.128 port 59432 Oct 21 05:06:26.890302 sshd[3221]: Connection closed by invalid user ubuntu 109.160.32.128 port 59432 [preauth] Oct 21 05:06:26.891398 systemd[1]: sshd@5-2-10.0.0.11:22-109.160.32.128:59432.service: Deactivated successfully. Oct 21 05:06:27.013324 containerd[2539]: time="2026-10-21T05:06:27.013199518Z" level=info msg="connecting to shim 38f2aeb61f837823a18496b9e3ca17ddcbd67508636f2b5cd42b73042bd27e5f" address="unix:///run/containerd/s/60c12267baa0748b89190480cb6a7718359e7df39ca0b33b07a97cbf49b2fc70" namespace=moby protocol=ttrpc version=3 Oct 21 05:06:27.034807 systemd[1]: Started docker-38f2aeb61f837823a18496b9e3ca17ddcbd67508636f2b5cd42b73042bd27e5f.scope - libcontainer container 38f2aeb61f837823a18496b9e3ca17ddcbd67508636f2b5cd42b73042bd27e5f. Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.272211Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_DATA_DIR","variable-value":"/var/lib/etcd"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.272327Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_NAME","variable-value":"b8316c32dc5640a2baef264f50d02eb0"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272350Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_URL=quay.io/coreos/etcd"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272357Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_TAG=v3.5.24"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272361Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_USER=etcd"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272364Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_SSL_DIR=/etc/ssl/certs"} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272396Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.272419Z","caller":"etcdmain/etcd.go:73","msg":"Running: ","args":["/usr/local/bin/etcd","--listen-client-urls=http://0.0.0.0:2379","--advertise-client-urls=http://10.10.10.10:2379"]} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.272458Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."} Oct 21 05:06:27.273948 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.272467Z","caller":"embed/etcd.go:140","msg":"configuring peer listeners","listen-peer-urls":["http://localhost:2380"]} Oct 21 05:06:27.276045 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.275771Z","caller":"embed/etcd.go:148","msg":"configuring client listeners","listen-client-urls":["http://0.0.0.0:2379"]} Oct 21 05:06:27.276045 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.275848Z","caller":"embed/etcd.go:323","msg":"starting an etcd server","etcd-version":"3.5.24","git-sha":"e72f3c2","go-version":"go1.24.9","go-os":"linux","go-arch":"amd64","max-cpu-set":2,"max-cpu-available":2,"member-initialized":false,"name":"b8316c32dc5640a2baef264f50d02eb0","data-dir":"/var/lib/etcd","wal-dir":"","wal-dir-dedicated":"","member-dir":"/var/lib/etcd/member","force-new-cluster":false,"heartbeat-interval":"100ms","election-timeout":"1s","initial-election-tick-advance":true,"snapshot-count":100000,"max-wals":5,"max-snapshots":5,"snapshot-catchup-entries":5000,"initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.10.10.10:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[],"cors":["*"],"host-whitelist":["*"],"initial-cluster":"b8316c32dc5640a2baef264f50d02eb0=http://localhost:2380","initial-cluster-state":"new","initial-cluster-token":"etcd-cluster","quota-backend-bytes":2147483648,"max-request-bytes":1572864,"max-concurrent-streams":4294967295,"pre-vote":true,"initial-corrupt-check":false,"corrupt-check-time-interval":"0s","compact-check-time-enabled":false,"compact-check-time-interval":"1m0s","auto-compaction-mode":"periodic","auto-compaction-retention":"0s","auto-compaction-interval":"0s","discovery-url":"","discovery-proxy":"","downgrade-check-interval":"5s"} Oct 21 05:06:27.281538 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.281003Z","caller":"etcdserver/backend.go:81","msg":"opened backend db","path":"/var/lib/etcd/member/snap/db","took":"4.972629ms"} Oct 21 05:06:27.288920 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288773Z","caller":"etcdserver/raft.go:507","msg":"starting local member","local-member-id":"8e9e05c52164694d","cluster-id":"cdf818194e3a8c32"} Oct 21 05:06:27.289112 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288816Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=()"} Oct 21 05:06:27.289112 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288841Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 0"} Oct 21 05:06:27.289112 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288848Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"newRaft 8e9e05c52164694d [peers: [], term: 0, commit: 0, applied: 0, lastindex: 0, lastterm: 0]"} Oct 21 05:06:27.289112 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288855Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 1"} Oct 21 05:06:27.289112 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.288881Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"} Oct 21 05:06:27.297595 etcd-wrapper[3128]: {"level":"warn","ts":"2026-10-21T05:06:27.297471Z","caller":"auth/store.go:1241","msg":"simple token is not cryptographically signed"} Oct 21 05:06:27.300598 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.300489Z","caller":"mvcc/kvstore.go:425","msg":"kvstore restored","current-rev":1} Oct 21 05:06:27.300726 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.300522Z","caller":"etcdserver/server.go:628","msg":"restore consistentIndex","index":0} Oct 21 05:06:27.303863 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.303771Z","caller":"etcdserver/quota.go:94","msg":"enabled backend quota with default value","quota-name":"v3-applier","quota-size-bytes":2147483648,"quota-size":"2.1 GB"} Oct 21 05:06:27.307056 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.306984Z","caller":"etcdserver/server.go:875","msg":"starting etcd server","local-member-id":"8e9e05c52164694d","local-server-version":"3.5.24","cluster-version":"to_be_decided"} Oct 21 05:06:27.308666 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.307220Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"} Oct 21 05:06:27.308666 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.307845Z","caller":"etcdserver/server.go:759","msg":"started as single-node; fast-forwarding election ticks","local-member-id":"8e9e05c52164694d","forward-ticks":9,"forward-duration":"900ms","election-ticks":10,"election-timeout":"1s"} Oct 21 05:06:27.308666 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.307979Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap.db","max":5,"interval":"30s"} Oct 21 05:06:27.308666 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.308003Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap","max":5,"interval":"30s"} Oct 21 05:06:27.308666 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.308009Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/wal","suffix":"wal","max":5,"interval":"30s"} Oct 21 05:06:27.309279 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.309181Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"} Oct 21 05:06:27.309538 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.309332Z","caller":"membership/cluster.go:421","msg":"added member","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","added-peer-id":"8e9e05c52164694d","added-peer-peer-urls":["http://localhost:2380"],"added-peer-is-learner":false} Oct 21 05:06:27.309598 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.309407Z","caller":"embed/etcd.go:292","msg":"now serving peer/client/metrics","local-member-id":"8e9e05c52164694d","initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.10.10.10:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[]} Oct 21 05:06:27.309727 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.309574Z","caller":"embed/etcd.go:633","msg":"serving peer traffic","address":"127.0.0.1:2380"} Oct 21 05:06:27.309727 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:27.309604Z","caller":"embed/etcd.go:603","msg":"cmux::serve","address":"127.0.0.1:2380"} Oct 21 05:06:27.433415 systemd[1]: var-lib-docker-overlay2-2e6f015c018ec67edb8453bb8c3c056fd75446ab63a2f36d2c64776956054d7a\x2dinit-merged.mount: Deactivated successfully. Oct 21 05:06:28.289898 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289596Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d is starting a new election at term 1"} Oct 21 05:06:28.289898 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289635Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became pre-candidate at term 1"} Oct 21 05:06:28.290295 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289685Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgPreVoteResp from 8e9e05c52164694d at term 1"} Oct 21 05:06:28.290295 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289697Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became candidate at term 2"} Oct 21 05:06:28.290295 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289702Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgVoteResp from 8e9e05c52164694d at term 2"} Oct 21 05:06:28.290295 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289712Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became leader at term 2"} Oct 21 05:06:28.290295 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.289718Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 8e9e05c52164694d elected leader 8e9e05c52164694d at term 2"} Oct 21 05:06:28.291695 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.291482Z","caller":"etcdserver/server.go:2711","msg":"setting up initial cluster version using v2 API","cluster-version":"3.5"} Oct 21 05:06:28.291695 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.291490Z","caller":"etcdserver/server.go:2158","msg":"published local member to cluster through raft","local-member-id":"8e9e05c52164694d","local-member-attributes":"{Name:b8316c32dc5640a2baef264f50d02eb0 ClientURLs:[http://10.10.10.10:2379]}","request-path":"/0/members/8e9e05c52164694d/attributes","cluster-id":"cdf818194e3a8c32","publish-timeout":"7s"} Oct 21 05:06:28.291940 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.291822Z","caller":"embed/serve.go:124","msg":"ready to serve client requests"} Oct 21 05:06:28.292100 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.291942Z","caller":"etcdmain/main.go:44","msg":"notifying init daemon"} Oct 21 05:06:28.292170 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.292032Z","caller":"etcdmain/main.go:50","msg":"successfully notified init daemon"} Oct 21 05:06:28.292517 systemd[1]: Started etcd-member.service - etcd (System Application Container). Oct 21 05:06:28.293098 systemd[1]: Reached target multi-user.target - Multi-User System. Oct 21 05:06:28.294512 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.292345Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"} Oct 21 05:06:28.295364 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.292694Z","caller":"embed/serve.go:210","msg":"serving client traffic insecurely; this is strongly discouraged!","traffic":"grpc+http","address":"[::]:2379"} Oct 21 05:06:28.295364 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.293688Z","caller":"membership/cluster.go:587","msg":"set initial cluster version","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","cluster-version":"3.5"} Oct 21 05:06:28.295364 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.295029Z","caller":"api/capability.go:75","msg":"enabled capabilities for version","cluster-version":"3.5"} Oct 21 05:06:28.295364 etcd-wrapper[3128]: {"level":"info","ts":"2026-10-21T05:06:28.295052Z","caller":"etcdserver/server.go:2735","msg":"cluster version is updated","cluster-version":"3.5"} Oct 21 05:06:28.296372 systemd[1]: Startup finished in 4.881s (kernel) + 18.174s (initrd) + 50.190s (userspace) = 1min 13.246s. Oct 21 05:06:31.900382 systemd[1]: Started sshd@6-4101-10.0.0.11:22-109.160.32.128:59462.service - OpenSSH per-connection server daemon (109.160.32.128:59462). Oct 21 05:06:31.968010 sshd[3284]: Connection closed by authenticating user root 109.160.32.128 port 59462 [preauth] Oct 21 05:06:31.969150 systemd[1]: sshd@6-4101-10.0.0.11:22-109.160.32.128:59462.service: Deactivated successfully. Oct 21 05:06:36.766139 systemd[1]: Started sshd@7-3-10.0.0.11:22-109.160.32.128:46162.service - OpenSSH per-connection server daemon (109.160.32.128:46162). Oct 21 05:06:36.844980 sshd[3290]: Connection closed by authenticating user root 109.160.32.128 port 46162 [preauth] Oct 21 05:06:36.846277 systemd[1]: sshd@7-3-10.0.0.11:22-109.160.32.128:46162.service: Deactivated successfully. Oct 21 05:06:37.284603 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 21 05:06:39.820245 systemd[1]: Started sshd@8-4102-10.0.0.11:22-98.64.94.113:49176.service - OpenSSH per-connection server daemon (98.64.94.113:49176). Oct 21 05:06:39.904963 sshd[3296]: Accepted publickey for core from 98.64.94.113 port 49176 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:39.905880 sshd-session[3296]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:39.917524 systemd[1]: Starting user@500.service - User Manager for UID 500... Oct 21 05:06:39.920410 systemd-logind[2513]: New session '3' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:39.925078 (systemd)[3300]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:39.927083 systemd-logind[2513]: New session '4' of user 'core' with class 'manager-early' and type 'unspecified'. Oct 21 05:06:40.111590 systemd[3300]: Queued start job for default target default.target. Oct 21 05:06:40.118225 systemd[3300]: Created slice app.slice - User Application Slice. Oct 21 05:06:40.118252 systemd[3300]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Oct 21 05:06:40.118265 systemd[3300]: Reached target machines.target - Virtual Machines and Containers. Oct 21 05:06:40.118289 systemd[3300]: Reached target paths.target - Paths. Oct 21 05:06:40.118310 systemd[3300]: Reached target timers.target - Timers. Oct 21 05:06:40.119137 systemd[3300]: Starting dbus.socket - D-Bus User Message Bus Socket... Oct 21 05:06:40.120580 systemd[3300]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Oct 21 05:06:40.120724 systemd[3300]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Oct 21 05:06:40.121569 systemd[3300]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Oct 21 05:06:40.121791 systemd[3300]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Oct 21 05:06:40.122374 systemd[3300]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Oct 21 05:06:40.129456 systemd[3300]: Listening on dbus.socket - D-Bus User Message Bus Socket. Oct 21 05:06:40.130438 systemd[3300]: Reached target sockets.target - Sockets. Oct 21 05:06:40.132063 systemd[3300]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Oct 21 05:06:40.132147 systemd[3300]: Reached target basic.target - Basic System. Oct 21 05:06:40.132183 systemd[3300]: Reached target default.target - Main User Target. Oct 21 05:06:40.132204 systemd[3300]: Startup finished in 201ms. Oct 21 05:06:40.132331 systemd[1]: Started user@500.service - User Manager for UID 500. Oct 21 05:06:40.138947 systemd[1]: Started session-3.scope - Session 3 of User core. Oct 21 05:06:40.180885 systemd[1]: Started sshd@9-4-10.0.0.11:22-98.64.94.113:49182.service - OpenSSH per-connection server daemon (98.64.94.113:49182). Oct 21 05:06:40.252637 sshd[3314]: Accepted publickey for core from 98.64.94.113 port 49182 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:40.253604 sshd-session[3314]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:40.257001 systemd-logind[2513]: New session '5' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:40.260787 systemd[1]: Started session-5.scope - Session 5 of User core. Oct 21 05:06:40.283928 sshd[3318]: Connection closed by 98.64.94.113 port 49182 Oct 21 05:06:40.284276 sshd-session[3314]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:40.286131 systemd[1]: sshd@9-4-10.0.0.11:22-98.64.94.113:49182.service: Deactivated successfully. Oct 21 05:06:40.287289 systemd[1]: session-5.scope: Deactivated successfully. Oct 21 05:06:40.287925 systemd-logind[2513]: Session 5 logged out. Waiting for processes to exit. Oct 21 05:06:40.288841 systemd-logind[2513]: Removed session 5. Oct 21 05:06:40.303535 systemd[1]: Started sshd@10-4103-10.0.0.11:22-98.64.94.113:49194.service - OpenSSH per-connection server daemon (98.64.94.113:49194). Oct 21 05:06:40.379898 sshd[3325]: Accepted publickey for core from 98.64.94.113 port 49194 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:40.380526 sshd-session[3325]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:40.384040 systemd-logind[2513]: New session '6' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:40.385838 systemd[1]: Started session-6.scope - Session 6 of User core. Oct 21 05:06:40.407323 sshd[3329]: Connection closed by 98.64.94.113 port 49194 Oct 21 05:06:40.407765 sshd-session[3325]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:40.409819 systemd[1]: sshd@10-4103-10.0.0.11:22-98.64.94.113:49194.service: Deactivated successfully. Oct 21 05:06:40.410986 systemd[1]: session-6.scope: Deactivated successfully. Oct 21 05:06:40.411946 systemd-logind[2513]: Session 6 logged out. Waiting for processes to exit. Oct 21 05:06:40.412948 systemd-logind[2513]: Removed session 6. Oct 21 05:06:40.425552 systemd[1]: Started sshd@11-4104-10.0.0.11:22-98.64.94.113:49206.service - OpenSSH per-connection server daemon (98.64.94.113:49206). Oct 21 05:06:40.500832 sshd[3336]: Accepted publickey for core from 98.64.94.113 port 49206 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:40.501695 sshd-session[3336]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:40.504764 systemd-logind[2513]: New session '7' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:40.518791 systemd[1]: Started session-7.scope - Session 7 of User core. Oct 21 05:06:40.541327 sshd[3340]: Connection closed by 98.64.94.113 port 49206 Oct 21 05:06:40.541759 sshd-session[3336]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:40.543789 systemd[1]: sshd@11-4104-10.0.0.11:22-98.64.94.113:49206.service: Deactivated successfully. Oct 21 05:06:40.545016 systemd[1]: session-7.scope: Deactivated successfully. Oct 21 05:06:40.546026 systemd-logind[2513]: Session 7 logged out. Waiting for processes to exit. Oct 21 05:06:40.546631 systemd-logind[2513]: Removed session 7. Oct 21 05:06:40.558424 systemd[1]: Started sshd@12-5-10.0.0.11:22-98.64.94.113:49220.service - OpenSSH per-connection server daemon (98.64.94.113:49220). Oct 21 05:06:40.636483 sshd[3346]: Accepted publickey for core from 98.64.94.113 port 49220 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:40.636912 sshd-session[3346]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:40.640369 systemd-logind[2513]: New session '8' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:40.648781 systemd[1]: Started session-8.scope - Session 8 of User core. Oct 21 05:06:40.841720 sudo[3351]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 21 05:06:40.841930 sudo[3351]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 21 05:06:40.859208 sudo[3351]: pam_unix(sudo:session): session closed for user root Oct 21 05:06:40.867835 sshd[3350]: Connection closed by 98.64.94.113 port 49220 Oct 21 05:06:40.868335 sshd-session[3346]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:40.870548 systemd[1]: sshd@12-5-10.0.0.11:22-98.64.94.113:49220.service: Deactivated successfully. Oct 21 05:06:40.872054 systemd[1]: session-8.scope: Deactivated successfully. Oct 21 05:06:40.872708 systemd-logind[2513]: Session 8 logged out. Waiting for processes to exit. Oct 21 05:06:40.873622 systemd-logind[2513]: Removed session 8. Oct 21 05:06:40.884834 systemd[1]: Started sshd@13-6-10.0.0.11:22-98.64.94.113:49236.service - OpenSSH per-connection server daemon (98.64.94.113:49236). Oct 21 05:06:40.952585 sshd[3358]: Accepted publickey for core from 98.64.94.113 port 49236 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:40.953437 sshd-session[3358]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:40.957031 systemd-logind[2513]: New session '9' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:40.962821 systemd[1]: Started session-9.scope - Session 9 of User core. Oct 21 05:06:40.978289 sudo[3364]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 21 05:06:40.978429 sudo[3364]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 21 05:06:40.979464 sudo[3364]: pam_unix(sudo:session): session closed for user root Oct 21 05:06:40.983614 sudo[3363]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Oct 21 05:06:40.983877 sudo[3363]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 21 05:06:40.988624 systemd[1]: Starting audit-rules.service - Load Audit Rules... Oct 21 05:06:41.029000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 21 05:06:41.029000 audit[3388]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef6035250 a2=420 a3=0 items=0 ppid=3369 pid=3388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:41.037930 augenrules[3388]: No rules Oct 21 05:06:41.038007 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 21 05:06:41.037519 systemd[1]: audit-rules.service: Deactivated successfully. Oct 21 05:06:41.038095 kernel: audit: type=1305 audit(1792559201.029:173): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 21 05:06:41.037703 systemd[1]: Finished audit-rules.service - Load Audit Rules. Oct 21 05:06:41.038147 kernel: audit: type=1300 audit(1792559201.029:173): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef6035250 a2=420 a3=0 items=0 ppid=3369 pid=3388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:41.039775 sudo[3363]: pam_unix(sudo:session): session closed for user root Oct 21 05:06:41.029000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 21 05:06:41.044524 kernel: audit: type=1327 audit(1792559201.029:173): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 21 05:06:41.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.047041 kernel: audit: type=1130 audit(1792559201.037:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.037000 audit[3363]: AUDIT1106 pid=3363 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.050301 sshd[3362]: Connection closed by 98.64.94.113 port 49236 Oct 21 05:06:41.050466 kernel: audit: type=1131 audit(1792559201.037:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.050486 kernel: audit: type=1106 audit(1792559201.037:176): pid=3363 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.050593 sshd-session[3358]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:41.052901 systemd[1]: sshd@13-6-10.0.0.11:22-98.64.94.113:49236.service: Deactivated successfully. Oct 21 05:06:41.037000 audit[3363]: AUDIT1104 pid=3363 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.054819 systemd[1]: session-9.scope: Deactivated successfully. Oct 21 05:06:41.055956 systemd-logind[2513]: Session 9 logged out. Waiting for processes to exit. Oct 21 05:06:41.057070 systemd-logind[2513]: Removed session 9. Oct 21 05:06:41.066158 kernel: audit: type=1104 audit(1792559201.037:177): pid=3363 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.049000 audit[3358]: AUDIT1106 pid=3358 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.070254 kernel: audit: type=1106 audit(1792559201.049:178): pid=3358 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.049000 audit[3358]: AUDIT1104 pid=3358 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.074720 kernel: audit: type=1104 audit(1792559201.049:179): pid=3358 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-10.0.0.11:22-98.64.94.113:49236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.078666 kernel: audit: type=1131 audit(1792559201.049:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-10.0.0.11:22-98.64.94.113:49236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.079605 systemd[1]: Started sshd@14-7-10.0.0.11:22-98.64.94.113:49252.service - OpenSSH per-connection server daemon (98.64.94.113:49252). Oct 21 05:06:41.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-10.0.0.11:22-98.64.94.113:49252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.155000 audit[3397]: AUDIT1101 pid=3397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.156612 sshd[3397]: Accepted publickey for core from 98.64.94.113 port 49252 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:41.156000 audit[3397]: AUDIT1103 pid=3397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.156000 audit[3397]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe555cb610 a2=3 a3=0 items=0 ppid=1 pid=3397 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:41.156000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:06:41.157493 sshd-session[3397]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:41.160693 systemd-logind[2513]: New session '10' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:41.170779 systemd[1]: Started session-10.scope - Session 10 of User core. Oct 21 05:06:41.171000 audit[3397]: AUDIT1105 pid=3397 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.173000 audit[3401]: AUDIT1103 pid=3401 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.189914 sshd[3401]: Connection closed by 98.64.94.113 port 49252 Oct 21 05:06:41.190767 sshd-session[3397]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:41.190000 audit[3397]: AUDIT1106 pid=3397 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.190000 audit[3397]: AUDIT1104 pid=3397 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.192559 systemd[1]: sshd@14-7-10.0.0.11:22-98.64.94.113:49252.service: Deactivated successfully. Oct 21 05:06:41.193638 systemd[1]: session-10.scope: Deactivated successfully. Oct 21 05:06:41.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-10.0.0.11:22-98.64.94.113:49252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.194253 systemd-logind[2513]: Session 10 logged out. Waiting for processes to exit. Oct 21 05:06:41.195187 systemd-logind[2513]: Removed session 10. Oct 21 05:06:41.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-10.0.0.11:22-98.64.94.113:49256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:41.207559 systemd[1]: Started sshd@15-4105-10.0.0.11:22-98.64.94.113:49256.service - OpenSSH per-connection server daemon (98.64.94.113:49256). Oct 21 05:06:41.286000 audit[3407]: AUDIT1101 pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.287113 sshd[3407]: Accepted publickey for core from 98.64.94.113 port 49256 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:41.286000 audit[3407]: AUDIT1103 pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.287000 audit[3407]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc202b3af0 a2=3 a3=0 items=0 ppid=1 pid=3407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:41.287000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:06:41.288001 sshd-session[3407]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:41.291720 systemd-logind[2513]: New session '11' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:41.302778 systemd[1]: Started session-11.scope - Session 11 of User core. Oct 21 05:06:41.303000 audit[3407]: AUDIT1105 pid=3407 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:41.304000 audit[3411]: AUDIT1103 pid=3411 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:42.038260 systemd[1]: Started sshd@16-8-10.0.0.11:22-109.160.32.128:46220.service - OpenSSH per-connection server daemon (109.160.32.128:46220). Oct 21 05:06:42.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-8-10.0.0.11:22-109.160.32.128:46220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:42.101417 sshd[3415]: Invalid user ubuntu from 109.160.32.128 port 46220 Oct 21 05:06:42.113673 sshd[3415]: Connection closed by invalid user ubuntu 109.160.32.128 port 46220 [preauth] Oct 21 05:06:42.113000 audit[3415]: AUDIT1109 pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:42.114784 systemd[1]: sshd@16-8-10.0.0.11:22-109.160.32.128:46220.service: Deactivated successfully. Oct 21 05:06:42.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-8-10.0.0.11:22-109.160.32.128:46220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:46.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4106-10.0.0.11:22-109.160.32.128:47698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:46.932282 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 21 05:06:46.927055 systemd[1]: Started sshd@17-4106-10.0.0.11:22-109.160.32.128:47698.service - OpenSSH per-connection server daemon (109.160.32.128:47698). Oct 21 05:06:46.932564 kernel: audit: type=1130 audit(1792559206.926:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4106-10.0.0.11:22-109.160.32.128:47698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:47.001863 sshd[3426]: Connection closed by authenticating user root 109.160.32.128 port 47698 [preauth] Oct 21 05:06:47.001000 audit[3426]: AUDIT1109 pid=3426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:47.005353 systemd[1]: sshd@17-4106-10.0.0.11:22-109.160.32.128:47698.service: Deactivated successfully. Oct 21 05:06:47.005660 kernel: audit: type=1109 audit(1792559207.001:200): pid=3426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:47.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4106-10.0.0.11:22-109.160.32.128:47698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:47.010781 kernel: audit: type=1131 audit(1792559207.004:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4106-10.0.0.11:22-109.160.32.128:47698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:47.056297 update_engine[2514]: I20261021 05:06:47.056234 2514 update_attempter.cc:509] Updating boot flags... Oct 21 05:06:47.413633 sshd[3411]: Connection closed by 98.64.94.113 port 49256 Oct 21 05:06:47.415001 sshd-session[3407]: pam_unix(sshd:session): session closed for user core Oct 21 05:06:47.413000 audit[3407]: AUDIT1106 pid=3407 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:47.419398 systemd[1]: sshd@15-4105-10.0.0.11:22-98.64.94.113:49256.service: Deactivated successfully. Oct 21 05:06:47.413000 audit[3407]: AUDIT1104 pid=3407 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:47.424608 kernel: audit: type=1106 audit(1792559207.413:202): pid=3407 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:47.422925 systemd[1]: session-11.scope: Deactivated successfully. Oct 21 05:06:47.424704 kernel: audit: type=1104 audit(1792559207.413:203): pid=3407 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:47.424625 systemd-logind[2513]: Session 11 logged out. Waiting for processes to exit. Oct 21 05:06:47.426157 systemd-logind[2513]: Removed session 11. Oct 21 05:06:47.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-10.0.0.11:22-98.64.94.113:49256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:47.432764 kernel: audit: type=1131 audit(1792559207.417:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-10.0.0.11:22-98.64.94.113:49256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:51.990160 systemd[1]: Started sshd@18-9-10.0.0.11:22-109.160.32.128:47784.service - OpenSSH per-connection server daemon (109.160.32.128:47784). Oct 21 05:06:51.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-10.0.0.11:22-109.160.32.128:47784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:51.996683 kernel: audit: type=1130 audit(1792559211.988:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-10.0.0.11:22-109.160.32.128:47784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:52.186514 sshd[3471]: Invalid user config from 109.160.32.128 port 47784 Oct 21 05:06:52.198800 sshd[3471]: Connection closed by invalid user config 109.160.32.128 port 47784 [preauth] Oct 21 05:06:52.197000 audit[3471]: AUDIT1109 pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:52.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-10.0.0.11:22-109.160.32.128:47784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:52.201913 systemd[1]: sshd@18-9-10.0.0.11:22-109.160.32.128:47784.service: Deactivated successfully. Oct 21 05:06:52.204384 kernel: audit: type=1109 audit(1792559212.197:206): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:52.204418 kernel: audit: type=1131 audit(1792559212.200:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-10.0.0.11:22-109.160.32.128:47784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:56.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-10.0.0.11:22-109.160.32.128:60080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:56.792963 systemd[1]: Started sshd@19-10-10.0.0.11:22-109.160.32.128:60080.service - OpenSSH per-connection server daemon (109.160.32.128:60080). Oct 21 05:06:56.797740 kernel: audit: type=1130 audit(1792559216.791:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-10.0.0.11:22-109.160.32.128:60080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:56.849862 sshd[3477]: Invalid user www from 109.160.32.128 port 60080 Oct 21 05:06:56.860256 sshd[3477]: Connection closed by invalid user www 109.160.32.128 port 60080 [preauth] Oct 21 05:06:56.859000 audit[3477]: AUDIT1109 pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:56.863305 systemd[1]: sshd@19-10-10.0.0.11:22-109.160.32.128:60080.service: Deactivated successfully. Oct 21 05:06:56.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-10.0.0.11:22-109.160.32.128:60080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:56.866797 kernel: audit: type=1109 audit(1792559216.859:209): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:06:56.866819 kernel: audit: type=1131 audit(1792559216.861:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-10.0.0.11:22-109.160.32.128:60080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:57.436023 systemd[1]: Started sshd@20-11-10.0.0.11:22-98.64.94.113:48020.service - OpenSSH per-connection server daemon (98.64.94.113:48020). Oct 21 05:06:57.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-11-10.0.0.11:22-98.64.94.113:48020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:57.440872 kernel: audit: type=1130 audit(1792559217.434:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-11-10.0.0.11:22-98.64.94.113:48020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:06:57.511000 audit[3483]: AUDIT1101 pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.516303 sshd-session[3483]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:06:57.517675 sshd[3483]: Accepted publickey for core from 98.64.94.113 port 48020 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:06:57.517704 kernel: audit: type=1101 audit(1792559217.511:212): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.514000 audit[3483]: AUDIT1103 pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.521663 kernel: audit: type=1103 audit(1792559217.514:213): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.521715 kernel: audit: type=1006 audit(1792559217.514:214): pid=3483 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 21 05:06:57.524716 systemd-logind[2513]: New session '12' of user 'core' with class 'user' and type 'tty'. Oct 21 05:06:57.514000 audit[3483]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2a4dea90 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:57.528527 kernel: audit: type=1300 audit(1792559217.514:214): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2a4dea90 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:06:57.514000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:06:57.531295 kernel: audit: type=1327 audit(1792559217.514:214): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:06:57.532878 systemd[1]: Started session-12.scope - Session 12 of User core. Oct 21 05:06:57.532000 audit[3483]: AUDIT1105 pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.538000 audit[3487]: AUDIT1103 pid=3487 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.544396 kernel: audit: type=1105 audit(1792559217.532:215): pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:06:57.544432 kernel: audit: type=1103 audit(1792559217.538:216): pid=3487 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:02.100044 systemd[1]: Started sshd@21-4107-10.0.0.11:22-109.160.32.128:60146.service - OpenSSH per-connection server daemon (109.160.32.128:60146). Oct 21 05:07:02.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4107-10.0.0.11:22-109.160.32.128:60146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:02.105672 kernel: audit: type=1130 audit(1792559222.098:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4107-10.0.0.11:22-109.160.32.128:60146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:02.170913 sshd[3496]: Connection closed by authenticating user root 109.160.32.128 port 60146 [preauth] Oct 21 05:07:02.169000 audit[3496]: AUDIT1109 pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:02.173514 systemd[1]: sshd@21-4107-10.0.0.11:22-109.160.32.128:60146.service: Deactivated successfully. Oct 21 05:07:02.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4107-10.0.0.11:22-109.160.32.128:60146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:02.175676 kernel: audit: type=1109 audit(1792559222.169:218): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:02.569353 sshd[3487]: Connection closed by 98.64.94.113 port 48020 Oct 21 05:07:02.570591 sshd-session[3483]: pam_unix(sshd:session): session closed for user core Oct 21 05:07:02.569000 audit[3483]: AUDIT1106 pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:02.572041 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:07:02.572090 kernel: audit: type=1106 audit(1792559222.569:220): pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:02.573527 systemd[1]: sshd@20-11-10.0.0.11:22-98.64.94.113:48020.service: Deactivated successfully. Oct 21 05:07:02.575391 systemd[1]: session-12.scope: Deactivated successfully. Oct 21 05:07:02.577389 systemd-logind[2513]: Session 12 logged out. Waiting for processes to exit. Oct 21 05:07:02.578456 systemd-logind[2513]: Removed session 12. Oct 21 05:07:02.569000 audit[3483]: AUDIT1104 pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:02.582708 kernel: audit: type=1104 audit(1792559222.569:221): pid=3483 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:02.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-11-10.0.0.11:22-98.64.94.113:48020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:02.586331 kernel: audit: type=1131 audit(1792559222.571:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-11-10.0.0.11:22-98.64.94.113:48020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:07.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-12-10.0.0.11:22-109.160.32.128:58252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:07.350081 systemd[1]: Started sshd@22-12-10.0.0.11:22-109.160.32.128:58252.service - OpenSSH per-connection server daemon (109.160.32.128:58252). Oct 21 05:07:07.355675 kernel: audit: type=1130 audit(1792559227.348:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-12-10.0.0.11:22-109.160.32.128:58252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:07.423000 audit[3505]: AUDIT1109 pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:07.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-12-10.0.0.11:22-109.160.32.128:58252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:07.480848 kernel: audit: type=1109 audit(1792559227.423:224): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:07.426659 systemd[1]: sshd@22-12-10.0.0.11:22-109.160.32.128:58252.service: Deactivated successfully. Oct 21 05:07:07.480908 sshd[3505]: Connection closed by authenticating user root 109.160.32.128 port 58252 [preauth] Oct 21 05:07:07.481047 kernel: audit: type=1131 audit(1792559227.425:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-12-10.0.0.11:22-109.160.32.128:58252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-13-10.0.0.11:22-109.160.32.128:58304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.271063 systemd[1]: Started sshd@23-13-10.0.0.11:22-109.160.32.128:58304.service - OpenSSH per-connection server daemon (109.160.32.128:58304). Oct 21 05:07:12.275883 kernel: audit: type=1130 audit(1792559232.269:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-13-10.0.0.11:22-109.160.32.128:58304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4108-10.0.0.11:22-98.64.94.113:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.588957 systemd[1]: Started sshd@24-4108-10.0.0.11:22-98.64.94.113:51414.service - OpenSSH per-connection server daemon (98.64.94.113:51414). Oct 21 05:07:12.593672 kernel: audit: type=1130 audit(1792559232.587:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4108-10.0.0.11:22-98.64.94.113:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.633256 sshd[3511]: Invalid user ubuntu from 109.160.32.128 port 58304 Oct 21 05:07:12.662000 audit[3515]: AUDIT1101 pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.666978 sshd-session[3515]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:07:12.665000 audit[3515]: AUDIT1103 pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.668209 sshd[3515]: Accepted publickey for core from 98.64.94.113 port 51414 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:07:12.671601 kernel: audit: type=1101 audit(1792559232.662:228): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.671669 kernel: audit: type=1103 audit(1792559232.665:229): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.665000 audit[3515]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1295ae00 a2=3 a3=0 items=0 ppid=1 pid=3515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:12.676853 systemd-logind[2513]: New session '13' of user 'core' with class 'user' and type 'tty'. Oct 21 05:07:12.677890 kernel: audit: type=1006 audit(1792559232.665:230): pid=3515 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 21 05:07:12.677921 kernel: audit: type=1300 audit(1792559232.665:230): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1295ae00 a2=3 a3=0 items=0 ppid=1 pid=3515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:12.665000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:12.679467 sshd[3511]: Connection closed by invalid user ubuntu 109.160.32.128 port 58304 [preauth] Oct 21 05:07:12.679669 kernel: audit: type=1327 audit(1792559232.665:230): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:12.678000 audit[3511]: AUDIT1109 pid=3511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:12.683688 kernel: audit: type=1109 audit(1792559232.678:231): pid=3511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:12.688826 systemd[1]: Started session-13.scope - Session 13 of User core. Oct 21 05:07:12.689096 systemd[1]: sshd@23-13-10.0.0.11:22-109.160.32.128:58304.service: Deactivated successfully. Oct 21 05:07:12.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-13-10.0.0.11:22-109.160.32.128:58304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.693665 kernel: audit: type=1131 audit(1792559232.687:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-13-10.0.0.11:22-109.160.32.128:58304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:12.693000 audit[3515]: AUDIT1105 pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.698000 audit[3521]: AUDIT1103 pid=3521 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:12.699676 kernel: audit: type=1105 audit(1792559232.693:233): pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:17.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-14-10.0.0.11:22-109.160.32.128:39434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:17.285126 systemd[1]: Started sshd@25-14-10.0.0.11:22-109.160.32.128:39434.service - OpenSSH per-connection server daemon (109.160.32.128:39434). Oct 21 05:07:17.287451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:07:17.287612 kernel: audit: type=1130 audit(1792559237.283:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-14-10.0.0.11:22-109.160.32.128:39434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:17.381577 sshd[3530]: Invalid user claude from 109.160.32.128 port 39434 Oct 21 05:07:17.400157 sshd[3530]: Connection closed by invalid user claude 109.160.32.128 port 39434 [preauth] Oct 21 05:07:17.398000 audit[3530]: AUDIT1109 pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:17.403357 systemd[1]: sshd@25-14-10.0.0.11:22-109.160.32.128:39434.service: Deactivated successfully. Oct 21 05:07:17.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-14-10.0.0.11:22-109.160.32.128:39434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:17.406748 kernel: audit: type=1109 audit(1792559237.398:236): pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:17.406785 kernel: audit: type=1131 audit(1792559237.401:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-14-10.0.0.11:22-109.160.32.128:39434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:17.732189 sshd[3521]: Connection closed by 98.64.94.113 port 51414 Oct 21 05:07:17.733490 sshd-session[3515]: pam_unix(sshd:session): session closed for user core Oct 21 05:07:17.732000 audit[3515]: AUDIT1106 pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:17.738116 systemd[1]: sshd@24-4108-10.0.0.11:22-98.64.94.113:51414.service: Deactivated successfully. Oct 21 05:07:17.732000 audit[3515]: AUDIT1104 pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:17.741694 systemd[1]: session-13.scope: Deactivated successfully. Oct 21 05:07:17.742535 kernel: audit: type=1106 audit(1792559237.732:238): pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:17.742567 kernel: audit: type=1104 audit(1792559237.732:239): pid=3515 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:17.742589 systemd-logind[2513]: Session 13 logged out. Waiting for processes to exit. Oct 21 05:07:17.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4108-10.0.0.11:22-98.64.94.113:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:17.745746 systemd-logind[2513]: Removed session 13. Oct 21 05:07:17.746680 kernel: audit: type=1131 audit(1792559237.736:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4108-10.0.0.11:22-98.64.94.113:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:22.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-15-10.0.0.11:22-109.160.32.128:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:22.650006 systemd[1]: Started sshd@26-15-10.0.0.11:22-109.160.32.128:39522.service - OpenSSH per-connection server daemon (109.160.32.128:39522). Oct 21 05:07:22.654691 kernel: audit: type=1130 audit(1792559242.648:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-15-10.0.0.11:22-109.160.32.128:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:22.710448 sshd[3539]: Invalid user esroot from 109.160.32.128 port 39522 Oct 21 05:07:22.721668 sshd[3539]: Connection closed by invalid user esroot 109.160.32.128 port 39522 [preauth] Oct 21 05:07:22.720000 audit[3539]: AUDIT1109 pid=3539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:22.722689 systemd[1]: sshd@26-15-10.0.0.11:22-109.160.32.128:39522.service: Deactivated successfully. Oct 21 05:07:22.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-15-10.0.0.11:22-109.160.32.128:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:22.730811 kernel: audit: type=1109 audit(1792559242.720:242): pid=3539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:22.730842 kernel: audit: type=1131 audit(1792559242.720:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-15-10.0.0.11:22-109.160.32.128:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-16-10.0.0.11:22-98.64.94.113:37634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.754127 systemd[1]: Started sshd@27-16-10.0.0.11:22-98.64.94.113:37634.service - OpenSSH per-connection server daemon (98.64.94.113:37634). Oct 21 05:07:27.760685 kernel: audit: type=1130 audit(1792559247.752:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-16-10.0.0.11:22-98.64.94.113:37634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-17-10.0.0.11:22-109.160.32.128:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.829425 systemd[1]: Started sshd@28-17-10.0.0.11:22-109.160.32.128:48654.service - OpenSSH per-connection server daemon (109.160.32.128:48654). Oct 21 05:07:27.835674 kernel: audit: type=1130 audit(1792559247.828:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-17-10.0.0.11:22-109.160.32.128:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.847000 audit[3545]: AUDIT1101 pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.850405 sshd-session[3545]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:07:27.851003 sshd[3545]: Accepted publickey for core from 98.64.94.113 port 37634 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:07:27.848000 audit[3545]: AUDIT1103 pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.861497 kernel: audit: type=1101 audit(1792559247.847:246): pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.861550 kernel: audit: type=1103 audit(1792559247.848:247): pid=3545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.862047 systemd-logind[2513]: New session '14' of user 'core' with class 'user' and type 'tty'. Oct 21 05:07:27.864370 kernel: audit: type=1006 audit(1792559247.848:248): pid=3545 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 21 05:07:27.848000 audit[3545]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce2ec01b0 a2=3 a3=0 items=0 ppid=1 pid=3545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:27.869668 kernel: audit: type=1300 audit(1792559247.848:248): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce2ec01b0 a2=3 a3=0 items=0 ppid=1 pid=3545 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:27.848000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:27.871321 systemd[1]: Started session-14.scope - Session 14 of User core. Oct 21 05:07:27.873089 kernel: audit: type=1327 audit(1792559247.848:248): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:27.872000 audit[3545]: AUDIT1105 pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.875000 audit[3553]: AUDIT1103 pid=3553 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.883506 kernel: audit: type=1105 audit(1792559247.872:249): pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.883538 kernel: audit: type=1103 audit(1792559247.875:250): pid=3553 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:27.911483 sshd[3549]: Invalid user elasticsearch from 109.160.32.128 port 48654 Oct 21 05:07:27.921702 sshd[3549]: Connection closed by invalid user elasticsearch 109.160.32.128 port 48654 [preauth] Oct 21 05:07:27.920000 audit[3549]: AUDIT1109 pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:27.922725 systemd[1]: sshd@28-17-10.0.0.11:22-109.160.32.128:48654.service: Deactivated successfully. Oct 21 05:07:27.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-17-10.0.0.11:22-109.160.32.128:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:27.927667 kernel: audit: type=1109 audit(1792559247.920:251): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:32.911203 sshd[3553]: Connection closed by 98.64.94.113 port 37634 Oct 21 05:07:32.911801 sshd-session[3545]: pam_unix(sshd:session): session closed for user core Oct 21 05:07:32.911000 audit[3545]: AUDIT1106 pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:32.914903 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:07:32.914999 kernel: audit: type=1106 audit(1792559252.911:253): pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:32.920363 systemd[1]: sshd@27-16-10.0.0.11:22-98.64.94.113:37634.service: Deactivated successfully. Oct 21 05:07:32.911000 audit[3545]: AUDIT1104 pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:32.921940 systemd[1]: session-14.scope: Deactivated successfully. Oct 21 05:07:32.925795 kernel: audit: type=1104 audit(1792559252.911:254): pid=3545 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:32.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-16-10.0.0.11:22-98.64.94.113:37634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:32.927507 systemd-logind[2513]: Session 14 logged out. Waiting for processes to exit. Oct 21 05:07:32.928554 systemd-logind[2513]: Removed session 14. Oct 21 05:07:32.929677 kernel: audit: type=1131 audit(1792559252.919:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-16-10.0.0.11:22-98.64.94.113:37634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:32.997817 systemd[1]: Started sshd@29-18-10.0.0.11:22-109.160.32.128:48674.service - OpenSSH per-connection server daemon (109.160.32.128:48674). Oct 21 05:07:32.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-18-10.0.0.11:22-109.160.32.128:48674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:33.002676 kernel: audit: type=1130 audit(1792559252.997:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-18-10.0.0.11:22-109.160.32.128:48674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:33.101891 sshd[3567]: Connection closed by authenticating user root 109.160.32.128 port 48674 [preauth] Oct 21 05:07:33.101000 audit[3567]: AUDIT1109 pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:33.104996 systemd[1]: sshd@29-18-10.0.0.11:22-109.160.32.128:48674.service: Deactivated successfully. Oct 21 05:07:33.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-18-10.0.0.11:22-109.160.32.128:48674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:33.108124 kernel: audit: type=1109 audit(1792559253.101:257): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:33.108233 kernel: audit: type=1131 audit(1792559253.104:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-18-10.0.0.11:22-109.160.32.128:48674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:37.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-19-10.0.0.11:22-109.160.32.128:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:37.674182 systemd[1]: Started sshd@30-19-10.0.0.11:22-109.160.32.128:50298.service - OpenSSH per-connection server daemon (109.160.32.128:50298). Oct 21 05:07:37.680674 kernel: audit: type=1130 audit(1792559257.673:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-19-10.0.0.11:22-109.160.32.128:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:37.772918 sshd[3573]: Invalid user edge from 109.160.32.128 port 50298 Oct 21 05:07:37.785285 sshd[3573]: Connection closed by invalid user edge 109.160.32.128 port 50298 [preauth] Oct 21 05:07:37.784000 audit[3573]: AUDIT1109 pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:37.787108 systemd[1]: sshd@30-19-10.0.0.11:22-109.160.32.128:50298.service: Deactivated successfully. Oct 21 05:07:37.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-19-10.0.0.11:22-109.160.32.128:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:37.793539 kernel: audit: type=1109 audit(1792559257.784:260): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:37.793574 kernel: audit: type=1131 audit(1792559257.786:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-19-10.0.0.11:22-109.160.32.128:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4109-10.0.0.11:22-109.160.32.128:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.880959 systemd[1]: Started sshd@31-4109-10.0.0.11:22-109.160.32.128:50348.service - OpenSSH per-connection server daemon (109.160.32.128:50348). Oct 21 05:07:42.886684 kernel: audit: type=1130 audit(1792559262.880:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4109-10.0.0.11:22-109.160.32.128:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-20-10.0.0.11:22-98.64.94.113:44882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.934760 systemd[1]: Started sshd@32-20-10.0.0.11:22-98.64.94.113:44882.service - OpenSSH per-connection server daemon (98.64.94.113:44882). Oct 21 05:07:42.940670 kernel: audit: type=1130 audit(1792559262.934:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-20-10.0.0.11:22-98.64.94.113:44882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.955839 sshd[3579]: Connection closed by authenticating user root 109.160.32.128 port 50348 [preauth] Oct 21 05:07:42.955000 audit[3579]: AUDIT1109 pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:42.957471 systemd[1]: sshd@31-4109-10.0.0.11:22-109.160.32.128:50348.service: Deactivated successfully. Oct 21 05:07:42.962679 kernel: audit: type=1109 audit(1792559262.955:264): pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:42.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4109-10.0.0.11:22-109.160.32.128:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:42.966698 kernel: audit: type=1131 audit(1792559262.957:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4109-10.0.0.11:22-109.160.32.128:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:43.016000 audit[3583]: AUDIT1101 pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.017472 sshd[3583]: Accepted publickey for core from 98.64.94.113 port 44882 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:07:43.020377 sshd-session[3583]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:07:43.019000 audit[3583]: AUDIT1103 pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.023741 kernel: audit: type=1101 audit(1792559263.016:266): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.023789 kernel: audit: type=1103 audit(1792559263.019:267): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.019000 audit[3583]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed7364080 a2=3 a3=0 items=0 ppid=1 pid=3583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:43.029309 kernel: audit: type=1006 audit(1792559263.019:268): pid=3583 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 21 05:07:43.029341 kernel: audit: type=1300 audit(1792559263.019:268): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed7364080 a2=3 a3=0 items=0 ppid=1 pid=3583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:43.030399 systemd-logind[2513]: New session '15' of user 'core' with class 'user' and type 'tty'. Oct 21 05:07:43.019000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:43.032551 kernel: audit: type=1327 audit(1792559263.019:268): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:43.038828 systemd[1]: Started session-15.scope - Session 15 of User core. Oct 21 05:07:43.039000 audit[3583]: AUDIT1105 pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.044000 audit[3589]: AUDIT1103 pid=3589 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:43.046690 kernel: audit: type=1105 audit(1792559263.039:269): pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:47.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-4110-10.0.0.11:22-109.160.32.128:59492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:47.667139 systemd[1]: Started sshd@33-4110-10.0.0.11:22-109.160.32.128:59492.service - OpenSSH per-connection server daemon (109.160.32.128:59492). Oct 21 05:07:47.733067 sshd[3598]: Invalid user admin from 109.160.32.128 port 59492 Oct 21 05:07:47.744336 sshd[3598]: Connection closed by invalid user admin 109.160.32.128 port 59492 [preauth] Oct 21 05:07:47.743000 audit[3598]: AUDIT1109 pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:47.745514 systemd[1]: sshd@33-4110-10.0.0.11:22-109.160.32.128:59492.service: Deactivated successfully. Oct 21 05:07:47.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-4110-10.0.0.11:22-109.160.32.128:59492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:48.075979 sshd[3589]: Connection closed by 98.64.94.113 port 44882 Oct 21 05:07:48.077000 audit[3583]: AUDIT1106 pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:48.076793 sshd-session[3583]: pam_unix(sshd:session): session closed for user core Oct 21 05:07:48.078809 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 21 05:07:48.078848 kernel: audit: type=1106 audit(1792559268.077:274): pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:48.082914 systemd[1]: sshd@32-20-10.0.0.11:22-98.64.94.113:44882.service: Deactivated successfully. Oct 21 05:07:48.078000 audit[3583]: AUDIT1104 pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:48.086697 kernel: audit: type=1104 audit(1792559268.078:275): pid=3583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:48.086419 systemd[1]: session-15.scope: Deactivated successfully. Oct 21 05:07:48.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-20-10.0.0.11:22-98.64.94.113:44882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:48.089076 kernel: audit: type=1131 audit(1792559268.082:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-20-10.0.0.11:22-98.64.94.113:44882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:48.090772 systemd-logind[2513]: Session 15 logged out. Waiting for processes to exit. Oct 21 05:07:48.091475 systemd-logind[2513]: Removed session 15. Oct 21 05:07:52.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-21-10.0.0.11:22-109.160.32.128:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:52.679030 systemd[1]: Started sshd@34-21-10.0.0.11:22-109.160.32.128:59520.service - OpenSSH per-connection server daemon (109.160.32.128:59520). Oct 21 05:07:52.684876 kernel: audit: type=1130 audit(1792559272.678:277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-21-10.0.0.11:22-109.160.32.128:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:52.753172 sshd[3607]: Connection closed by authenticating user root 109.160.32.128 port 59520 [preauth] Oct 21 05:07:52.752000 audit[3607]: AUDIT1109 pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:52.754883 systemd[1]: sshd@34-21-10.0.0.11:22-109.160.32.128:59520.service: Deactivated successfully. Oct 21 05:07:52.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-21-10.0.0.11:22-109.160.32.128:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:52.761852 kernel: audit: type=1109 audit(1792559272.752:278): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:52.761888 kernel: audit: type=1131 audit(1792559272.754:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-21-10.0.0.11:22-109.160.32.128:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:57.640143 systemd[1]: Started sshd@35-4111-10.0.0.11:22-109.160.32.128:54098.service - OpenSSH per-connection server daemon (109.160.32.128:54098). Oct 21 05:07:57.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4111-10.0.0.11:22-109.160.32.128:54098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:57.644779 kernel: audit: type=1130 audit(1792559277.639:280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4111-10.0.0.11:22-109.160.32.128:54098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:57.703212 sshd[3613]: Invalid user potok from 109.160.32.128 port 54098 Oct 21 05:07:57.716343 sshd[3613]: Connection closed by invalid user potok 109.160.32.128 port 54098 [preauth] Oct 21 05:07:57.715000 audit[3613]: AUDIT1109 pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:57.718868 systemd[1]: sshd@35-4111-10.0.0.11:22-109.160.32.128:54098.service: Deactivated successfully. Oct 21 05:07:57.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4111-10.0.0.11:22-109.160.32.128:54098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:57.721811 kernel: audit: type=1109 audit(1792559277.715:281): pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:07:57.721863 kernel: audit: type=1131 audit(1792559277.718:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4111-10.0.0.11:22-109.160.32.128:54098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:58.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-22-10.0.0.11:22-98.64.94.113:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:58.093859 systemd[1]: Started sshd@36-22-10.0.0.11:22-98.64.94.113:46390.service - OpenSSH per-connection server daemon (98.64.94.113:46390). Oct 21 05:07:58.107144 kernel: audit: type=1130 audit(1792559278.093:283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-22-10.0.0.11:22-98.64.94.113:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:07:58.188000 audit[3619]: AUDIT1101 pid=3619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.188906 sshd[3619]: Accepted publickey for core from 98.64.94.113 port 46390 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:07:58.190312 sshd-session[3619]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:07:58.189000 audit[3619]: AUDIT1103 pid=3619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.196612 systemd-logind[2513]: New session '16' of user 'core' with class 'user' and type 'tty'. Oct 21 05:07:58.198995 kernel: audit: type=1101 audit(1792559278.188:284): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.199049 kernel: audit: type=1103 audit(1792559278.189:285): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.201614 kernel: audit: type=1006 audit(1792559278.189:286): pid=3619 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 21 05:07:58.201859 systemd[1]: Started session-16.scope - Session 16 of User core. Oct 21 05:07:58.189000 audit[3619]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcfb69aec0 a2=3 a3=0 items=0 ppid=1 pid=3619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:58.207371 kernel: audit: type=1300 audit(1792559278.189:286): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcfb69aec0 a2=3 a3=0 items=0 ppid=1 pid=3619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:07:58.189000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:58.209734 kernel: audit: type=1327 audit(1792559278.189:286): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:07:58.204000 audit[3619]: AUDIT1105 pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.212671 kernel: audit: type=1105 audit(1792559278.204:287): pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:07:58.206000 audit[3623]: AUDIT1103 pid=3623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:02.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4112-10.0.0.11:22-109.160.32.128:54150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:02.812475 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:08:02.809145 systemd[1]: Started sshd@37-4112-10.0.0.11:22-109.160.32.128:54150.service - OpenSSH per-connection server daemon (109.160.32.128:54150). Oct 21 05:08:02.812795 kernel: audit: type=1130 audit(1792559282.808:289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4112-10.0.0.11:22-109.160.32.128:54150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:03.128810 sshd[3632]: Invalid user s9rosemary from 109.160.32.128 port 54150 Oct 21 05:08:03.189453 sshd[3632]: Connection closed by invalid user s9rosemary 109.160.32.128 port 54150 [preauth] Oct 21 05:08:03.189000 audit[3632]: AUDIT1109 pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:03.194177 systemd[1]: sshd@37-4112-10.0.0.11:22-109.160.32.128:54150.service: Deactivated successfully. Oct 21 05:08:03.194668 kernel: audit: type=1109 audit(1792559283.189:290): pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:03.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4112-10.0.0.11:22-109.160.32.128:54150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:03.199771 kernel: audit: type=1131 audit(1792559283.193:291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4112-10.0.0.11:22-109.160.32.128:54150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:03.241144 sshd[3623]: Connection closed by 98.64.94.113 port 46390 Oct 21 05:08:03.242382 sshd-session[3619]: pam_unix(sshd:session): session closed for user core Oct 21 05:08:03.242000 audit[3619]: AUDIT1106 pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:03.248670 kernel: audit: type=1106 audit(1792559283.242:292): pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:03.248824 systemd[1]: sshd@36-22-10.0.0.11:22-98.64.94.113:46390.service: Deactivated successfully. Oct 21 05:08:03.242000 audit[3619]: AUDIT1104 pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:03.252758 kernel: audit: type=1104 audit(1792559283.242:293): pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:03.251741 systemd[1]: session-16.scope: Deactivated successfully. Oct 21 05:08:03.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-22-10.0.0.11:22-98.64.94.113:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:03.256528 systemd-logind[2513]: Session 16 logged out. Waiting for processes to exit. Oct 21 05:08:03.257674 kernel: audit: type=1131 audit(1792559283.248:294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-22-10.0.0.11:22-98.64.94.113:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:03.258077 systemd-logind[2513]: Removed session 16. Oct 21 05:08:07.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-23-10.0.0.11:22-109.160.32.128:56902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:07.774975 systemd[1]: Started sshd@38-23-10.0.0.11:22-109.160.32.128:56902.service - OpenSSH per-connection server daemon (109.160.32.128:56902). Oct 21 05:08:07.780680 kernel: audit: type=1130 audit(1792559287.774:295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-23-10.0.0.11:22-109.160.32.128:56902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:07.845008 sshd[3641]: Invalid user trader from 109.160.32.128 port 56902 Oct 21 05:08:07.855998 sshd[3641]: Connection closed by invalid user trader 109.160.32.128 port 56902 [preauth] Oct 21 05:08:07.855000 audit[3641]: AUDIT1109 pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:07.858864 systemd[1]: sshd@38-23-10.0.0.11:22-109.160.32.128:56902.service: Deactivated successfully. Oct 21 05:08:07.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-23-10.0.0.11:22-109.160.32.128:56902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:07.864287 kernel: audit: type=1109 audit(1792559287.855:296): pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:07.864343 kernel: audit: type=1131 audit(1792559287.858:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-23-10.0.0.11:22-109.160.32.128:56902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:12.862983 systemd[1]: Started sshd@39-4113-10.0.0.11:22-109.160.32.128:56980.service - OpenSSH per-connection server daemon (109.160.32.128:56980). Oct 21 05:08:12.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4113-10.0.0.11:22-109.160.32.128:56980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:12.868229 kernel: audit: type=1130 audit(1792559292.862:298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4113-10.0.0.11:22-109.160.32.128:56980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:13.022852 sshd[3647]: Connection closed by authenticating user root 109.160.32.128 port 56980 [preauth] Oct 21 05:08:13.022000 audit[3647]: AUDIT1109 pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:13.026597 systemd[1]: sshd@39-4113-10.0.0.11:22-109.160.32.128:56980.service: Deactivated successfully. Oct 21 05:08:13.026739 kernel: audit: type=1109 audit(1792559293.022:299): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:13.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4113-10.0.0.11:22-109.160.32.128:56980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:13.032674 kernel: audit: type=1131 audit(1792559293.026:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4113-10.0.0.11:22-109.160.32.128:56980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:13.262839 systemd[1]: Started sshd@40-4114-10.0.0.11:22-98.64.94.113:49696.service - OpenSSH per-connection server daemon (98.64.94.113:49696). Oct 21 05:08:13.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4114-10.0.0.11:22-98.64.94.113:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:13.269696 kernel: audit: type=1130 audit(1792559293.262:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4114-10.0.0.11:22-98.64.94.113:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:13.345000 audit[3653]: AUDIT1101 pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.347332 sshd-session[3653]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:08:13.351049 sshd[3653]: Accepted publickey for core from 98.64.94.113 port 49696 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:08:13.345000 audit[3653]: AUDIT1103 pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.355109 kernel: audit: type=1101 audit(1792559293.345:302): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.355166 kernel: audit: type=1103 audit(1792559293.345:303): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.357762 systemd-logind[2513]: New session '17' of user 'core' with class 'user' and type 'tty'. Oct 21 05:08:13.359782 kernel: audit: type=1006 audit(1792559293.345:304): pid=3653 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 21 05:08:13.345000 audit[3653]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff30235060 a2=3 a3=0 items=0 ppid=1 pid=3653 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:13.361846 systemd[1]: Started session-17.scope - Session 17 of User core. Oct 21 05:08:13.365046 kernel: audit: type=1300 audit(1792559293.345:304): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff30235060 a2=3 a3=0 items=0 ppid=1 pid=3653 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:13.345000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:13.367975 kernel: audit: type=1327 audit(1792559293.345:304): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:13.365000 audit[3653]: AUDIT1105 pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.372249 kernel: audit: type=1105 audit(1792559293.365:305): pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:13.367000 audit[3657]: AUDIT1103 pid=3657 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:17.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4115-10.0.0.11:22-109.160.32.128:41790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:17.865939 systemd[1]: Started sshd@41-4115-10.0.0.11:22-109.160.32.128:41790.service - OpenSSH per-connection server daemon (109.160.32.128:41790). Oct 21 05:08:17.867699 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:08:17.867788 kernel: audit: type=1130 audit(1792559297.865:307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4115-10.0.0.11:22-109.160.32.128:41790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:17.930966 sshd[3666]: Invalid user deployer from 109.160.32.128 port 41790 Oct 21 05:08:17.942193 sshd[3666]: Connection closed by invalid user deployer 109.160.32.128 port 41790 [preauth] Oct 21 05:08:17.941000 audit[3666]: AUDIT1109 pid=3666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:17.945039 systemd[1]: sshd@41-4115-10.0.0.11:22-109.160.32.128:41790.service: Deactivated successfully. Oct 21 05:08:17.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4115-10.0.0.11:22-109.160.32.128:41790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:17.947707 kernel: audit: type=1109 audit(1792559297.941:308): pid=3666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:17.947754 kernel: audit: type=1131 audit(1792559297.944:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4115-10.0.0.11:22-109.160.32.128:41790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:18.400268 sshd[3657]: Connection closed by 98.64.94.113 port 49696 Oct 21 05:08:18.400788 sshd-session[3653]: pam_unix(sshd:session): session closed for user core Oct 21 05:08:18.401000 audit[3653]: AUDIT1106 pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:18.404188 systemd[1]: sshd@40-4114-10.0.0.11:22-98.64.94.113:49696.service: Deactivated successfully. Oct 21 05:08:18.406292 systemd[1]: session-17.scope: Deactivated successfully. Oct 21 05:08:18.409111 systemd-logind[2513]: Session 17 logged out. Waiting for processes to exit. Oct 21 05:08:18.401000 audit[3653]: AUDIT1104 pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:18.410303 systemd-logind[2513]: Removed session 17. Oct 21 05:08:18.412556 kernel: audit: type=1106 audit(1792559298.401:310): pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:18.412598 kernel: audit: type=1104 audit(1792559298.401:311): pid=3653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:18.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4114-10.0.0.11:22-98.64.94.113:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:18.416663 kernel: audit: type=1131 audit(1792559298.401:312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4114-10.0.0.11:22-98.64.94.113:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:22.641174 systemd[1]: Started sshd@42-4116-10.0.0.11:22-109.160.32.128:41834.service - OpenSSH per-connection server daemon (109.160.32.128:41834). Oct 21 05:08:22.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4116-10.0.0.11:22-109.160.32.128:41834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:22.646697 kernel: audit: type=1130 audit(1792559302.640:313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4116-10.0.0.11:22-109.160.32.128:41834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:23.206256 sshd[3675]: Connection closed by authenticating user root 109.160.32.128 port 41834 [preauth] Oct 21 05:08:23.206000 audit[3675]: AUDIT1109 pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:23.209441 systemd[1]: sshd@42-4116-10.0.0.11:22-109.160.32.128:41834.service: Deactivated successfully. Oct 21 05:08:23.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4116-10.0.0.11:22-109.160.32.128:41834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:23.213551 kernel: audit: type=1109 audit(1792559303.206:314): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:23.213575 kernel: audit: type=1131 audit(1792559303.208:315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4116-10.0.0.11:22-109.160.32.128:41834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-24-10.0.0.11:22-109.160.32.128:50754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.043032 systemd[1]: Started sshd@43-24-10.0.0.11:22-109.160.32.128:50754.service - OpenSSH per-connection server daemon (109.160.32.128:50754). Oct 21 05:08:28.048678 kernel: audit: type=1130 audit(1792559308.042:316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-24-10.0.0.11:22-109.160.32.128:50754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.119720 sshd[3681]: Invalid user wizard from 109.160.32.128 port 50754 Oct 21 05:08:28.131664 sshd[3681]: Connection closed by invalid user wizard 109.160.32.128 port 50754 [preauth] Oct 21 05:08:28.131000 audit[3681]: AUDIT1109 pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:28.133867 systemd[1]: sshd@43-24-10.0.0.11:22-109.160.32.128:50754.service: Deactivated successfully. Oct 21 05:08:28.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-24-10.0.0.11:22-109.160.32.128:50754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.139910 kernel: audit: type=1109 audit(1792559308.131:317): pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:28.139944 kernel: audit: type=1131 audit(1792559308.131:318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-24-10.0.0.11:22-109.160.32.128:50754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.433767 systemd[1]: Started sshd@44-4117-10.0.0.11:22-98.64.94.113:40012.service - OpenSSH per-connection server daemon (98.64.94.113:40012). Oct 21 05:08:28.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4117-10.0.0.11:22-98.64.94.113:40012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.439671 kernel: audit: type=1130 audit(1792559308.433:319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4117-10.0.0.11:22-98.64.94.113:40012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:28.517000 audit[3687]: AUDIT1101 pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.518215 sshd[3687]: Accepted publickey for core from 98.64.94.113 port 40012 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:08:28.519581 sshd-session[3687]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:08:28.517000 audit[3687]: AUDIT1103 pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.525999 systemd-logind[2513]: New session '18' of user 'core' with class 'user' and type 'tty'. Oct 21 05:08:28.527668 kernel: audit: type=1101 audit(1792559308.517:320): pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.527717 kernel: audit: type=1103 audit(1792559308.517:321): pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.530662 kernel: audit: type=1006 audit(1792559308.517:322): pid=3687 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 21 05:08:28.517000 audit[3687]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc782aa0c0 a2=3 a3=0 items=0 ppid=1 pid=3687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:28.534501 kernel: audit: type=1300 audit(1792559308.517:322): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc782aa0c0 a2=3 a3=0 items=0 ppid=1 pid=3687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:28.517000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:28.536991 kernel: audit: type=1327 audit(1792559308.517:322): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:28.537867 systemd[1]: Started session-18.scope - Session 18 of User core. Oct 21 05:08:28.544000 audit[3687]: AUDIT1105 pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.544000 audit[3691]: AUDIT1103 pid=3691 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.553331 kernel: audit: type=1105 audit(1792559308.544:323): pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:28.553363 kernel: audit: type=1103 audit(1792559308.544:324): pid=3691 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:32.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-4118-10.0.0.11:22-109.160.32.128:50818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:32.788982 kernel: audit: type=1130 audit(1792559312.783:325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-4118-10.0.0.11:22-109.160.32.128:50818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:32.784064 systemd[1]: Started sshd@45-4118-10.0.0.11:22-109.160.32.128:50818.service - OpenSSH per-connection server daemon (109.160.32.128:50818). Oct 21 05:08:33.313024 sshd[3700]: Connection closed by authenticating user root 109.160.32.128 port 50818 [preauth] Oct 21 05:08:33.311000 audit[3700]: AUDIT1109 pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:33.316140 systemd[1]: sshd@45-4118-10.0.0.11:22-109.160.32.128:50818.service: Deactivated successfully. Oct 21 05:08:33.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-4118-10.0.0.11:22-109.160.32.128:50818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:33.317673 kernel: audit: type=1109 audit(1792559313.311:326): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:33.577984 sshd[3691]: Connection closed by 98.64.94.113 port 40012 Oct 21 05:08:33.579064 sshd-session[3687]: pam_unix(sshd:session): session closed for user core Oct 21 05:08:33.578000 audit[3687]: AUDIT1106 pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:33.581838 systemd[1]: sshd@44-4117-10.0.0.11:22-98.64.94.113:40012.service: Deactivated successfully. Oct 21 05:08:33.586107 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:08:33.584530 systemd[1]: session-18.scope: Deactivated successfully. Oct 21 05:08:33.586160 kernel: audit: type=1106 audit(1792559313.578:328): pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:33.587082 systemd-logind[2513]: Session 18 logged out. Waiting for processes to exit. Oct 21 05:08:33.588167 systemd-logind[2513]: Removed session 18. Oct 21 05:08:33.578000 audit[3687]: AUDIT1104 pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:33.592388 kernel: audit: type=1104 audit(1792559313.578:329): pid=3687 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:33.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4117-10.0.0.11:22-98.64.94.113:40012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:33.596250 kernel: audit: type=1131 audit(1792559313.580:330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4117-10.0.0.11:22-98.64.94.113:40012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:38.124023 systemd[1]: Started sshd@46-4119-10.0.0.11:22-109.160.32.128:60424.service - OpenSSH per-connection server daemon (109.160.32.128:60424). Oct 21 05:08:38.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-4119-10.0.0.11:22-109.160.32.128:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:38.128727 kernel: audit: type=1130 audit(1792559318.122:331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-4119-10.0.0.11:22-109.160.32.128:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:38.305892 sshd[3709]: Invalid user pi from 109.160.32.128 port 60424 Oct 21 05:08:38.339636 sshd[3709]: Connection closed by invalid user pi 109.160.32.128 port 60424 [preauth] Oct 21 05:08:38.338000 audit[3709]: AUDIT1109 pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:38.341872 systemd[1]: sshd@46-4119-10.0.0.11:22-109.160.32.128:60424.service: Deactivated successfully. Oct 21 05:08:38.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-4119-10.0.0.11:22-109.160.32.128:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:38.348024 kernel: audit: type=1109 audit(1792559318.338:332): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:38.348064 kernel: audit: type=1131 audit(1792559318.338:333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-4119-10.0.0.11:22-109.160.32.128:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4120-10.0.0.11:22-109.160.32.128:60468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.196099 systemd[1]: Started sshd@47-4120-10.0.0.11:22-109.160.32.128:60468.service - OpenSSH per-connection server daemon (109.160.32.128:60468). Oct 21 05:08:43.202682 kernel: audit: type=1130 audit(1792559323.194:334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4120-10.0.0.11:22-109.160.32.128:60468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4121-10.0.0.11:22-98.64.94.113:44372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.602993 systemd[1]: Started sshd@48-4121-10.0.0.11:22-98.64.94.113:44372.service - OpenSSH per-connection server daemon (98.64.94.113:44372). Oct 21 05:08:43.609683 kernel: audit: type=1130 audit(1792559323.601:335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4121-10.0.0.11:22-98.64.94.113:44372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.679000 audit[3719]: AUDIT1101 pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.686120 systemd-logind[2513]: New session '19' of user 'core' with class 'user' and type 'tty'. Oct 21 05:08:43.681942 sshd-session[3719]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:08:43.687683 sshd[3719]: Accepted publickey for core from 98.64.94.113 port 44372 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:08:43.687730 kernel: audit: type=1101 audit(1792559323.679:336): pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.679000 audit[3719]: AUDIT1103 pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.694095 kernel: audit: type=1103 audit(1792559323.679:337): pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.694150 kernel: audit: type=1006 audit(1792559323.679:338): pid=3719 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 21 05:08:43.679000 audit[3719]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff2245e310 a2=3 a3=0 items=0 ppid=1 pid=3719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:43.695832 systemd[1]: Started session-19.scope - Session 19 of User core. Oct 21 05:08:43.699712 kernel: audit: type=1300 audit(1792559323.679:338): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff2245e310 a2=3 a3=0 items=0 ppid=1 pid=3719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:43.679000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:43.702517 kernel: audit: type=1327 audit(1792559323.679:338): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:43.697000 audit[3719]: AUDIT1105 pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.706439 kernel: audit: type=1105 audit(1792559323.697:339): pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.699000 audit[3723]: AUDIT1103 pid=3723 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.713667 kernel: audit: type=1103 audit(1792559323.699:340): pid=3723 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:43.779428 sshd[3715]: Connection closed by authenticating user root 109.160.32.128 port 60468 [preauth] Oct 21 05:08:43.778000 audit[3715]: AUDIT1109 pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:43.781322 systemd[1]: sshd@47-4120-10.0.0.11:22-109.160.32.128:60468.service: Deactivated successfully. Oct 21 05:08:43.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4120-10.0.0.11:22-109.160.32.128:60468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:43.785662 kernel: audit: type=1109 audit(1792559323.778:341): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:48.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4122-10.0.0.11:22-109.160.32.128:38054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.464365 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:08:48.459217 systemd[1]: Started sshd@49-4122-10.0.0.11:22-109.160.32.128:38054.service - OpenSSH per-connection server daemon (109.160.32.128:38054). Oct 21 05:08:48.464714 kernel: audit: type=1130 audit(1792559328.457:343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4122-10.0.0.11:22-109.160.32.128:38054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.527218 sshd[3734]: Connection closed by authenticating user root 109.160.32.128 port 38054 [preauth] Oct 21 05:08:48.526000 audit[3734]: AUDIT1109 pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:48.528245 systemd[1]: sshd@49-4122-10.0.0.11:22-109.160.32.128:38054.service: Deactivated successfully. Oct 21 05:08:48.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4122-10.0.0.11:22-109.160.32.128:38054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.535220 kernel: audit: type=1109 audit(1792559328.526:344): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:48.535267 kernel: audit: type=1131 audit(1792559328.526:345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4122-10.0.0.11:22-109.160.32.128:38054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.733557 sshd[3723]: Connection closed by 98.64.94.113 port 44372 Oct 21 05:08:48.734936 sshd-session[3719]: pam_unix(sshd:session): session closed for user core Oct 21 05:08:48.733000 audit[3719]: AUDIT1106 pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:48.739118 systemd[1]: sshd@48-4121-10.0.0.11:22-98.64.94.113:44372.service: Deactivated successfully. Oct 21 05:08:48.733000 audit[3719]: AUDIT1104 pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:48.744159 kernel: audit: type=1106 audit(1792559328.733:346): pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:48.741919 systemd[1]: session-19.scope: Deactivated successfully. Oct 21 05:08:48.744234 kernel: audit: type=1104 audit(1792559328.733:347): pid=3719 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:48.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4121-10.0.0.11:22-98.64.94.113:44372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.744774 systemd-logind[2513]: Session 19 logged out. Waiting for processes to exit. Oct 21 05:08:48.746402 kernel: audit: type=1131 audit(1792559328.737:348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4121-10.0.0.11:22-98.64.94.113:44372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:48.747377 systemd-logind[2513]: Removed session 19. Oct 21 05:08:53.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-25-10.0.0.11:22-109.160.32.128:38098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:53.461797 systemd[1]: Started sshd@50-25-10.0.0.11:22-109.160.32.128:38098.service - OpenSSH per-connection server daemon (109.160.32.128:38098). Oct 21 05:08:53.467687 kernel: audit: type=1130 audit(1792559333.460:349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-25-10.0.0.11:22-109.160.32.128:38098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:53.521583 sshd[3743]: Invalid user ispapps from 109.160.32.128 port 38098 Oct 21 05:08:53.533668 sshd[3743]: Connection closed by invalid user ispapps 109.160.32.128 port 38098 [preauth] Oct 21 05:08:53.532000 audit[3743]: AUDIT1109 pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:53.536726 systemd[1]: sshd@50-25-10.0.0.11:22-109.160.32.128:38098.service: Deactivated successfully. Oct 21 05:08:53.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-25-10.0.0.11:22-109.160.32.128:38098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:53.540751 kernel: audit: type=1109 audit(1792559333.532:350): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:53.540775 kernel: audit: type=1131 audit(1792559333.534:351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-25-10.0.0.11:22-109.160.32.128:38098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4123-10.0.0.11:22-109.160.32.128:47020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.629189 systemd[1]: Started sshd@51-4123-10.0.0.11:22-109.160.32.128:47020.service - OpenSSH per-connection server daemon (109.160.32.128:47020). Oct 21 05:08:58.633679 kernel: audit: type=1130 audit(1792559338.627:352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4123-10.0.0.11:22-109.160.32.128:47020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4124-10.0.0.11:22-98.64.94.113:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.753866 kernel: audit: type=1130 audit(1792559338.748:353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4124-10.0.0.11:22-98.64.94.113:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.749808 systemd[1]: Started sshd@52-4124-10.0.0.11:22-98.64.94.113:46364.service - OpenSSH per-connection server daemon (98.64.94.113:46364). Oct 21 05:08:58.813218 sshd[3749]: Connection closed by authenticating user root 109.160.32.128 port 47020 [preauth] Oct 21 05:08:58.811000 audit[3749]: AUDIT1109 pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:58.815995 systemd[1]: sshd@51-4123-10.0.0.11:22-109.160.32.128:47020.service: Deactivated successfully. Oct 21 05:08:58.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4123-10.0.0.11:22-109.160.32.128:47020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.819161 kernel: audit: type=1109 audit(1792559338.811:354): pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:08:58.819213 kernel: audit: type=1131 audit(1792559338.814:355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4123-10.0.0.11:22-109.160.32.128:47020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:08:58.826000 audit[3753]: AUDIT1101 pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.830456 sshd-session[3753]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:08:58.831449 sshd[3753]: Accepted publickey for core from 98.64.94.113 port 46364 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:08:58.828000 audit[3753]: AUDIT1103 pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.833011 kernel: audit: type=1101 audit(1792559338.826:356): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.833133 kernel: audit: type=1103 audit(1792559338.828:357): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.836102 kernel: audit: type=1006 audit(1792559338.828:358): pid=3753 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 21 05:08:58.828000 audit[3753]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2ab9c1a0 a2=3 a3=0 items=0 ppid=1 pid=3753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:58.839528 kernel: audit: type=1300 audit(1792559338.828:358): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2ab9c1a0 a2=3 a3=0 items=0 ppid=1 pid=3753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:08:58.828000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:58.840823 systemd-logind[2513]: New session '20' of user 'core' with class 'user' and type 'tty'. Oct 21 05:08:58.842470 kernel: audit: type=1327 audit(1792559338.828:358): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:08:58.845822 systemd[1]: Started session-20.scope - Session 20 of User core. Oct 21 05:08:58.845000 audit[3753]: AUDIT1105 pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.850000 audit[3759]: AUDIT1103 pid=3759 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:08:58.852669 kernel: audit: type=1105 audit(1792559338.845:359): pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:03.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-26-10.0.0.11:22-109.160.32.128:47030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:03.506015 systemd[1]: Started sshd@53-26-10.0.0.11:22-109.160.32.128:47030.service - OpenSSH per-connection server daemon (109.160.32.128:47030). Oct 21 05:09:03.572445 sshd[3768]: Invalid user web from 109.160.32.128 port 47030 Oct 21 05:09:03.588383 sshd[3768]: Connection closed by invalid user web 109.160.32.128 port 47030 [preauth] Oct 21 05:09:03.587000 audit[3768]: AUDIT1109 pid=3768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:03.589800 systemd[1]: sshd@53-26-10.0.0.11:22-109.160.32.128:47030.service: Deactivated successfully. Oct 21 05:09:03.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-26-10.0.0.11:22-109.160.32.128:47030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:03.881551 sshd[3759]: Connection closed by 98.64.94.113 port 46364 Oct 21 05:09:03.882788 sshd-session[3753]: pam_unix(sshd:session): session closed for user core Oct 21 05:09:03.881000 audit[3753]: AUDIT1106 pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:03.884792 systemd[1]: sshd@52-4124-10.0.0.11:22-98.64.94.113:46364.service: Deactivated successfully. Oct 21 05:09:03.888903 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 21 05:09:03.886511 systemd[1]: session-20.scope: Deactivated successfully. Oct 21 05:09:03.888961 kernel: audit: type=1106 audit(1792559343.881:364): pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:03.889753 systemd-logind[2513]: Session 20 logged out. Waiting for processes to exit. Oct 21 05:09:03.890813 systemd-logind[2513]: Removed session 20. Oct 21 05:09:03.881000 audit[3753]: AUDIT1104 pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:03.894673 kernel: audit: type=1104 audit(1792559343.881:365): pid=3753 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:03.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4124-10.0.0.11:22-98.64.94.113:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:03.897989 kernel: audit: type=1131 audit(1792559343.883:366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4124-10.0.0.11:22-98.64.94.113:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:08.616093 systemd[1]: Started sshd@54-4125-10.0.0.11:22-109.160.32.128:54608.service - OpenSSH per-connection server daemon (109.160.32.128:54608). Oct 21 05:09:08.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4125-10.0.0.11:22-109.160.32.128:54608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:08.622677 kernel: audit: type=1130 audit(1792559348.615:367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4125-10.0.0.11:22-109.160.32.128:54608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:08.759787 sshd[3777]: Invalid user claude from 109.160.32.128 port 54608 Oct 21 05:09:08.775628 sshd[3777]: Connection closed by invalid user claude 109.160.32.128 port 54608 [preauth] Oct 21 05:09:08.775000 audit[3777]: AUDIT1109 pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:08.776865 systemd[1]: sshd@54-4125-10.0.0.11:22-109.160.32.128:54608.service: Deactivated successfully. Oct 21 05:09:08.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4125-10.0.0.11:22-109.160.32.128:54608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:08.784055 kernel: audit: type=1109 audit(1792559348.775:368): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:08.784092 kernel: audit: type=1131 audit(1792559348.775:369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4125-10.0.0.11:22-109.160.32.128:54608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:13.903030 systemd[1]: Started sshd@55-4126-10.0.0.11:22-98.64.94.113:49986.service - OpenSSH per-connection server daemon (98.64.94.113:49986). Oct 21 05:09:13.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4126-10.0.0.11:22-98.64.94.113:49986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:13.907768 kernel: audit: type=1130 audit(1792559353.902:370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4126-10.0.0.11:22-98.64.94.113:49986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:13.980000 audit[3783]: AUDIT1101 pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:13.980955 sshd[3783]: Accepted publickey for core from 98.64.94.113 port 49986 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:09:13.982330 sshd-session[3783]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:09:13.981000 audit[3783]: AUDIT1103 pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:13.990108 systemd-logind[2513]: New session '21' of user 'core' with class 'user' and type 'tty'. Oct 21 05:09:13.992241 kernel: audit: type=1101 audit(1792559353.980:371): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:13.992292 kernel: audit: type=1103 audit(1792559353.981:372): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:13.994640 kernel: audit: type=1006 audit(1792559353.981:373): pid=3783 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 21 05:09:13.994829 systemd[1]: Started session-21.scope - Session 21 of User core. Oct 21 05:09:13.981000 audit[3783]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe4e27b7a0 a2=3 a3=0 items=0 ppid=1 pid=3783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:13.999561 kernel: audit: type=1300 audit(1792559353.981:373): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe4e27b7a0 a2=3 a3=0 items=0 ppid=1 pid=3783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:13.981000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:14.002706 kernel: audit: type=1327 audit(1792559353.981:373): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:14.002000 audit[3783]: AUDIT1105 pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:14.007628 kernel: audit: type=1105 audit(1792559354.002:374): pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:14.004000 audit[3787]: AUDIT1103 pid=3787 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:14.011860 kernel: audit: type=1103 audit(1792559354.004:375): pid=3787 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:14.037546 systemd[1]: Started sshd@56-4127-10.0.0.11:22-109.160.32.128:54650.service - OpenSSH per-connection server daemon (109.160.32.128:54650). Oct 21 05:09:14.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4127-10.0.0.11:22-109.160.32.128:54650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:14.042671 kernel: audit: type=1130 audit(1792559354.037:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4127-10.0.0.11:22-109.160.32.128:54650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:14.114578 sshd[3796]: Invalid user claude from 109.160.32.128 port 54650 Oct 21 05:09:14.124912 sshd[3796]: Connection closed by invalid user claude 109.160.32.128 port 54650 [preauth] Oct 21 05:09:14.124000 audit[3796]: AUDIT1109 pid=3796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:14.127811 systemd[1]: sshd@56-4127-10.0.0.11:22-109.160.32.128:54650.service: Deactivated successfully. Oct 21 05:09:14.128721 kernel: audit: type=1109 audit(1792559354.124:377): pid=3796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:14.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4127-10.0.0.11:22-109.160.32.128:54650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:18.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.11:22-109.160.32.128:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:18.994297 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:09:18.992080 systemd[1]: Started sshd@57-27-10.0.0.11:22-109.160.32.128:53240.service - OpenSSH per-connection server daemon (109.160.32.128:53240). Oct 21 05:09:18.994633 kernel: audit: type=1130 audit(1792559358.991:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.11:22-109.160.32.128:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:19.035582 sshd[3787]: Connection closed by 98.64.94.113 port 49986 Oct 21 05:09:19.036080 sshd-session[3783]: pam_unix(sshd:session): session closed for user core Oct 21 05:09:19.036000 audit[3783]: AUDIT1106 pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:19.038863 systemd[1]: sshd@55-4126-10.0.0.11:22-98.64.94.113:49986.service: Deactivated successfully. Oct 21 05:09:19.040530 systemd[1]: session-21.scope: Deactivated successfully. Oct 21 05:09:19.042054 systemd-logind[2513]: Session 21 logged out. Waiting for processes to exit. Oct 21 05:09:19.044562 systemd-logind[2513]: Removed session 21. Oct 21 05:09:19.044921 kernel: audit: type=1106 audit(1792559359.036:380): pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:19.036000 audit[3783]: AUDIT1104 pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:19.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4126-10.0.0.11:22-98.64.94.113:49986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:19.052097 kernel: audit: type=1104 audit(1792559359.036:381): pid=3783 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:19.052130 kernel: audit: type=1131 audit(1792559359.036:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4126-10.0.0.11:22-98.64.94.113:49986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:19.073189 sshd[3802]: Invalid user deploy from 109.160.32.128 port 53240 Oct 21 05:09:19.084467 sshd[3802]: Connection closed by invalid user deploy 109.160.32.128 port 53240 [preauth] Oct 21 05:09:19.084000 audit[3802]: AUDIT1109 pid=3802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:19.085540 systemd[1]: sshd@57-27-10.0.0.11:22-109.160.32.128:53240.service: Deactivated successfully. Oct 21 05:09:19.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.11:22-109.160.32.128:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:19.092865 kernel: audit: type=1109 audit(1792559359.084:383): pid=3802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:19.092897 kernel: audit: type=1131 audit(1792559359.084:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.11:22-109.160.32.128:53240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:24.182014 systemd[1]: Started sshd@58-4128-10.0.0.11:22-109.160.32.128:53296.service - OpenSSH per-connection server daemon (109.160.32.128:53296). Oct 21 05:09:24.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.11:22-109.160.32.128:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:24.187689 kernel: audit: type=1130 audit(1792559364.181:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.11:22-109.160.32.128:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:24.322829 sshd[3811]: Invalid user sysupdate from 109.160.32.128 port 53296 Oct 21 05:09:24.342151 sshd[3811]: Connection closed by invalid user sysupdate 109.160.32.128 port 53296 [preauth] Oct 21 05:09:24.341000 audit[3811]: AUDIT1109 pid=3811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:24.343871 systemd[1]: sshd@58-4128-10.0.0.11:22-109.160.32.128:53296.service: Deactivated successfully. Oct 21 05:09:24.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.11:22-109.160.32.128:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:24.350779 kernel: audit: type=1109 audit(1792559364.341:386): pid=3811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:24.350817 kernel: audit: type=1131 audit(1792559364.343:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.11:22-109.160.32.128:53296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:28.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4129-10.0.0.11:22-109.160.32.128:47202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:28.993060 systemd[1]: Started sshd@59-4129-10.0.0.11:22-109.160.32.128:47202.service - OpenSSH per-connection server daemon (109.160.32.128:47202). Oct 21 05:09:28.997670 kernel: audit: type=1130 audit(1792559368.992:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4129-10.0.0.11:22-109.160.32.128:47202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:29.054801 systemd[1]: Started sshd@60-4130-10.0.0.11:22-98.64.94.113:47048.service - OpenSSH per-connection server daemon (98.64.94.113:47048). Oct 21 05:09:29.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4130-10.0.0.11:22-98.64.94.113:47048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:29.059682 kernel: audit: type=1130 audit(1792559369.054:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4130-10.0.0.11:22-98.64.94.113:47048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:29.104366 sshd[3817]: Invalid user admin2 from 109.160.32.128 port 47202 Oct 21 05:09:29.116575 sshd[3817]: Connection closed by invalid user admin2 109.160.32.128 port 47202 [preauth] Oct 21 05:09:29.116000 audit[3817]: AUDIT1109 pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:29.121478 systemd[1]: sshd@59-4129-10.0.0.11:22-109.160.32.128:47202.service: Deactivated successfully. Oct 21 05:09:29.121665 kernel: audit: type=1109 audit(1792559369.116:390): pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:29.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4129-10.0.0.11:22-109.160.32.128:47202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:29.125710 kernel: audit: type=1131 audit(1792559369.121:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4129-10.0.0.11:22-109.160.32.128:47202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:29.142000 audit[3821]: AUDIT1101 pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:29.142900 sshd[3821]: Accepted publickey for core from 98.64.94.113 port 47048 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:09:29.144226 sshd-session[3821]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:09:29.142000 audit[3821]: AUDIT1103 pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:29.151137 systemd-logind[2513]: New session '22' of user 'core' with class 'user' and type 'tty'. Oct 21 05:09:29.152445 kernel: audit: type=1101 audit(1792559369.142:392): pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:29.152480 kernel: audit: type=1103 audit(1792559369.142:393): pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:29.154681 kernel: audit: type=1006 audit(1792559369.142:394): pid=3821 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 21 05:09:29.142000 audit[3821]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe9a231130 a2=3 a3=0 items=0 ppid=1 pid=3821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:29.142000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:29.156464 systemd[1]: Started session-22.scope - Session 22 of User core. Oct 21 05:09:29.157000 audit[3821]: AUDIT1105 pid=3821 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:29.158000 audit[3827]: AUDIT1103 pid=3827 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:34.056964 systemd[1]: Started sshd@61-28-10.0.0.11:22-109.160.32.128:47230.service - OpenSSH per-connection server daemon (109.160.32.128:47230). Oct 21 05:09:34.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-28-10.0.0.11:22-109.160.32.128:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.060787 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 21 05:09:34.060818 kernel: audit: type=1130 audit(1792559374.056:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-28-10.0.0.11:22-109.160.32.128:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.128046 sshd[3836]: Invalid user m from 109.160.32.128 port 47230 Oct 21 05:09:34.139739 sshd[3836]: Connection closed by invalid user m 109.160.32.128 port 47230 [preauth] Oct 21 05:09:34.139000 audit[3836]: AUDIT1109 pid=3836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:34.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-28-10.0.0.11:22-109.160.32.128:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.142895 systemd[1]: sshd@61-28-10.0.0.11:22-109.160.32.128:47230.service: Deactivated successfully. Oct 21 05:09:34.145370 kernel: audit: type=1109 audit(1792559374.139:398): pid=3836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:34.145424 kernel: audit: type=1131 audit(1792559374.142:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-28-10.0.0.11:22-109.160.32.128:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.189604 sshd[3827]: Connection closed by 98.64.94.113 port 47048 Oct 21 05:09:34.190773 sshd-session[3821]: pam_unix(sshd:session): session closed for user core Oct 21 05:09:34.190000 audit[3821]: AUDIT1106 pid=3821 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:34.194839 systemd[1]: sshd@60-4130-10.0.0.11:22-98.64.94.113:47048.service: Deactivated successfully. Oct 21 05:09:34.195681 kernel: audit: type=1106 audit(1792559374.190:400): pid=3821 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:34.190000 audit[3821]: AUDIT1104 pid=3821 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:34.198060 systemd[1]: session-22.scope: Deactivated successfully. Oct 21 05:09:34.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4130-10.0.0.11:22-98.64.94.113:47048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.201601 systemd-logind[2513]: Session 22 logged out. Waiting for processes to exit. Oct 21 05:09:34.202593 kernel: audit: type=1104 audit(1792559374.190:401): pid=3821 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:34.202623 kernel: audit: type=1131 audit(1792559374.192:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4130-10.0.0.11:22-98.64.94.113:47048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:34.203304 systemd-logind[2513]: Removed session 22. Oct 21 05:09:38.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-29-10.0.0.11:22-109.160.32.128:40394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:38.971031 systemd[1]: Started sshd@62-29-10.0.0.11:22-109.160.32.128:40394.service - OpenSSH per-connection server daemon (109.160.32.128:40394). Oct 21 05:09:38.977673 kernel: audit: type=1130 audit(1792559378.970:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-29-10.0.0.11:22-109.160.32.128:40394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:39.051921 sshd[3845]: Invalid user actian from 109.160.32.128 port 40394 Oct 21 05:09:39.062757 sshd[3845]: Connection closed by invalid user actian 109.160.32.128 port 40394 [preauth] Oct 21 05:09:39.062000 audit[3845]: AUDIT1109 pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:39.065338 systemd[1]: sshd@62-29-10.0.0.11:22-109.160.32.128:40394.service: Deactivated successfully. Oct 21 05:09:39.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-29-10.0.0.11:22-109.160.32.128:40394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:39.075747 kernel: audit: type=1109 audit(1792559379.062:404): pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:39.075805 kernel: audit: type=1131 audit(1792559379.064:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-29-10.0.0.11:22-109.160.32.128:40394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:43.960052 systemd[1]: Started sshd@63-30-10.0.0.11:22-109.160.32.128:40464.service - OpenSSH per-connection server daemon (109.160.32.128:40464). Oct 21 05:09:43.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-30-10.0.0.11:22-109.160.32.128:40464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:43.966728 kernel: audit: type=1130 audit(1792559383.959:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-30-10.0.0.11:22-109.160.32.128:40464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:44.212851 sshd[3851]: Connection closed by authenticating user root 109.160.32.128 port 40464 [preauth] Oct 21 05:09:44.213000 audit[3851]: AUDIT1109 pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:44.218922 systemd[1]: Started sshd@64-4131-10.0.0.11:22-98.64.94.113:48420.service - OpenSSH per-connection server daemon (98.64.94.113:48420). Oct 21 05:09:44.220680 kernel: audit: type=1109 audit(1792559384.213:407): pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:44.221208 systemd[1]: sshd@63-30-10.0.0.11:22-109.160.32.128:40464.service: Deactivated successfully. Oct 21 05:09:44.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4131-10.0.0.11:22-98.64.94.113:48420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:44.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-30-10.0.0.11:22-109.160.32.128:40464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:44.237782 kernel: audit: type=1130 audit(1792559384.220:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4131-10.0.0.11:22-98.64.94.113:48420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:44.237809 kernel: audit: type=1131 audit(1792559384.220:409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-30-10.0.0.11:22-109.160.32.128:40464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:44.295000 audit[3855]: AUDIT1101 pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.296114 sshd[3855]: Accepted publickey for core from 98.64.94.113 port 48420 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:09:44.299277 sshd-session[3855]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:09:44.298000 audit[3855]: AUDIT1103 pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.302308 kernel: audit: type=1101 audit(1792559384.295:410): pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.302360 kernel: audit: type=1103 audit(1792559384.298:411): pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.304792 kernel: audit: type=1006 audit(1792559384.298:412): pid=3855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 21 05:09:44.298000 audit[3855]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb55fc580 a2=3 a3=0 items=0 ppid=1 pid=3855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:44.307978 kernel: audit: type=1300 audit(1792559384.298:412): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb55fc580 a2=3 a3=0 items=0 ppid=1 pid=3855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:44.298000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:44.310757 systemd-logind[2513]: New session '23' of user 'core' with class 'user' and type 'tty'. Oct 21 05:09:44.311291 kernel: audit: type=1327 audit(1792559384.298:412): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:44.313843 systemd[1]: Started session-23.scope - Session 23 of User core. Oct 21 05:09:44.315000 audit[3855]: AUDIT1105 pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.318000 audit[3861]: AUDIT1103 pid=3861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.321768 kernel: audit: type=1105 audit(1792559384.315:413): pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:44.321852 kernel: audit: type=1103 audit(1792559384.318:414): pid=3861 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:48.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-31-10.0.0.11:22-109.160.32.128:46170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:48.824099 systemd[1]: Started sshd@65-31-10.0.0.11:22-109.160.32.128:46170.service - OpenSSH per-connection server daemon (109.160.32.128:46170). Oct 21 05:09:48.897675 sshd[3870]: Connection closed by authenticating user root 109.160.32.128 port 46170 [preauth] Oct 21 05:09:48.897000 audit[3870]: AUDIT1109 pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:48.899024 systemd[1]: sshd@65-31-10.0.0.11:22-109.160.32.128:46170.service: Deactivated successfully. Oct 21 05:09:48.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-31-10.0.0.11:22-109.160.32.128:46170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:49.348910 sshd[3861]: Connection closed by 98.64.94.113 port 48420 Oct 21 05:09:49.349477 sshd-session[3855]: pam_unix(sshd:session): session closed for user core Oct 21 05:09:49.349000 audit[3855]: AUDIT1106 pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:49.351250 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 21 05:09:49.351304 kernel: audit: type=1106 audit(1792559389.349:418): pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:49.351850 systemd[1]: sshd@64-4131-10.0.0.11:22-98.64.94.113:48420.service: Deactivated successfully. Oct 21 05:09:49.354488 systemd[1]: session-23.scope: Deactivated successfully. Oct 21 05:09:49.358462 systemd-logind[2513]: Session 23 logged out. Waiting for processes to exit. Oct 21 05:09:49.349000 audit[3855]: AUDIT1104 pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:49.359632 systemd-logind[2513]: Removed session 23. Oct 21 05:09:49.362208 kernel: audit: type=1104 audit(1792559389.349:419): pid=3855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:49.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4131-10.0.0.11:22-98.64.94.113:48420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:49.366156 kernel: audit: type=1131 audit(1792559389.351:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4131-10.0.0.11:22-98.64.94.113:48420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:53.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-4132-10.0.0.11:22-109.160.32.128:46188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:53.592074 kernel: audit: type=1130 audit(1792559393.586:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-4132-10.0.0.11:22-109.160.32.128:46188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:53.587071 systemd[1]: Started sshd@66-4132-10.0.0.11:22-109.160.32.128:46188.service - OpenSSH per-connection server daemon (109.160.32.128:46188). Oct 21 05:09:53.644400 sshd[3879]: Invalid user sftpuser from 109.160.32.128 port 46188 Oct 21 05:09:53.661743 sshd[3879]: Connection closed by invalid user sftpuser 109.160.32.128 port 46188 [preauth] Oct 21 05:09:53.661000 audit[3879]: AUDIT1109 pid=3879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:53.662814 systemd[1]: sshd@66-4132-10.0.0.11:22-109.160.32.128:46188.service: Deactivated successfully. Oct 21 05:09:53.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-4132-10.0.0.11:22-109.160.32.128:46188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:53.669998 kernel: audit: type=1109 audit(1792559393.661:422): pid=3879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:53.670033 kernel: audit: type=1131 audit(1792559393.662:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-4132-10.0.0.11:22-109.160.32.128:46188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:58.602000 systemd[1]: Started sshd@67-4133-10.0.0.11:22-109.160.32.128:48040.service - OpenSSH per-connection server daemon (109.160.32.128:48040). Oct 21 05:09:58.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4133-10.0.0.11:22-109.160.32.128:48040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:58.608690 kernel: audit: type=1130 audit(1792559398.601:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4133-10.0.0.11:22-109.160.32.128:48040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:58.743685 sshd[3885]: Invalid user amine from 109.160.32.128 port 48040 Oct 21 05:09:58.756986 sshd[3885]: Connection closed by invalid user amine 109.160.32.128 port 48040 [preauth] Oct 21 05:09:58.756000 audit[3885]: AUDIT1109 pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:58.759935 systemd[1]: sshd@67-4133-10.0.0.11:22-109.160.32.128:48040.service: Deactivated successfully. Oct 21 05:09:58.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4133-10.0.0.11:22-109.160.32.128:48040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:58.764015 kernel: audit: type=1109 audit(1792559398.756:425): pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:09:58.764036 kernel: audit: type=1131 audit(1792559398.759:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4133-10.0.0.11:22-109.160.32.128:48040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:59.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-32-10.0.0.11:22-98.64.94.113:53418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:59.371973 systemd[1]: Started sshd@68-32-10.0.0.11:22-98.64.94.113:53418.service - OpenSSH per-connection server daemon (98.64.94.113:53418). Oct 21 05:09:59.377674 kernel: audit: type=1130 audit(1792559399.371:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-32-10.0.0.11:22-98.64.94.113:53418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:09:59.449000 audit[3891]: AUDIT1101 pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.450913 sshd-session[3891]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:09:59.453019 sshd[3891]: Accepted publickey for core from 98.64.94.113 port 53418 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:09:59.455962 systemd-logind[2513]: New session '24' of user 'core' with class 'user' and type 'tty'. Oct 21 05:09:59.449000 audit[3891]: AUDIT1103 pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.459710 kernel: audit: type=1101 audit(1792559399.449:428): pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.459764 kernel: audit: type=1103 audit(1792559399.449:429): pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.462282 kernel: audit: type=1006 audit(1792559399.449:430): pid=3891 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 21 05:09:59.449000 audit[3891]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda1c36380 a2=3 a3=0 items=0 ppid=1 pid=3891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:59.465958 kernel: audit: type=1300 audit(1792559399.449:430): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda1c36380 a2=3 a3=0 items=0 ppid=1 pid=3891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:09:59.449000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:59.468161 kernel: audit: type=1327 audit(1792559399.449:430): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:09:59.469892 systemd[1]: Started session-24.scope - Session 24 of User core. Oct 21 05:09:59.471000 audit[3891]: AUDIT1105 pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.472000 audit[3895]: AUDIT1103 pid=3895 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:09:59.478664 kernel: audit: type=1105 audit(1792559399.471:431): pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:03.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4134-10.0.0.11:22-109.160.32.128:48080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:03.705032 systemd[1]: Started sshd@69-4134-10.0.0.11:22-109.160.32.128:48080.service - OpenSSH per-connection server daemon (109.160.32.128:48080). Oct 21 05:10:03.712001 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 21 05:10:03.712091 kernel: audit: type=1130 audit(1792559403.703:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4134-10.0.0.11:22-109.160.32.128:48080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:03.768726 sshd[3905]: Invalid user openclaw from 109.160.32.128 port 48080 Oct 21 05:10:03.781791 sshd[3905]: Connection closed by invalid user openclaw 109.160.32.128 port 48080 [preauth] Oct 21 05:10:03.780000 audit[3905]: AUDIT1109 pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:03.784908 systemd[1]: sshd@69-4134-10.0.0.11:22-109.160.32.128:48080.service: Deactivated successfully. Oct 21 05:10:03.786021 kernel: audit: type=1109 audit(1792559403.780:434): pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:03.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4134-10.0.0.11:22-109.160.32.128:48080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:03.789678 kernel: audit: type=1131 audit(1792559403.783:435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4134-10.0.0.11:22-109.160.32.128:48080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:04.507855 sshd[3895]: Connection closed by 98.64.94.113 port 53418 Oct 21 05:10:04.508419 sshd-session[3891]: pam_unix(sshd:session): session closed for user core Oct 21 05:10:04.507000 audit[3891]: AUDIT1106 pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:04.513289 systemd[1]: sshd@68-32-10.0.0.11:22-98.64.94.113:53418.service: Deactivated successfully. Oct 21 05:10:04.515677 kernel: audit: type=1106 audit(1792559404.507:436): pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:04.507000 audit[3891]: AUDIT1104 pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:04.515878 systemd[1]: session-24.scope: Deactivated successfully. Oct 21 05:10:04.515909 systemd-logind[2513]: Session 24 logged out. Waiting for processes to exit. Oct 21 05:10:04.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-32-10.0.0.11:22-98.64.94.113:53418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:04.521058 kernel: audit: type=1104 audit(1792559404.507:437): pid=3891 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:04.521105 kernel: audit: type=1131 audit(1792559404.512:438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-32-10.0.0.11:22-98.64.94.113:53418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:04.521162 systemd-logind[2513]: Removed session 24. Oct 21 05:10:08.487031 systemd[1]: Started sshd@70-33-10.0.0.11:22-109.160.32.128:37278.service - OpenSSH per-connection server daemon (109.160.32.128:37278). Oct 21 05:10:08.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-33-10.0.0.11:22-109.160.32.128:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:08.493670 kernel: audit: type=1130 audit(1792559408.485:439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-33-10.0.0.11:22-109.160.32.128:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:08.561875 sshd[3914]: Connection closed by authenticating user root 109.160.32.128 port 37278 [preauth] Oct 21 05:10:08.560000 audit[3914]: AUDIT1109 pid=3914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:08.565669 kernel: audit: type=1109 audit(1792559408.560:440): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:08.565783 systemd[1]: sshd@70-33-10.0.0.11:22-109.160.32.128:37278.service: Deactivated successfully. Oct 21 05:10:08.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-33-10.0.0.11:22-109.160.32.128:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:08.571677 kernel: audit: type=1131 audit(1792559408.564:441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-33-10.0.0.11:22-109.160.32.128:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:13.441969 systemd[1]: Started sshd@71-4135-10.0.0.11:22-109.160.32.128:37348.service - OpenSSH per-connection server daemon (109.160.32.128:37348). Oct 21 05:10:13.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-4135-10.0.0.11:22-109.160.32.128:37348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:13.447683 kernel: audit: type=1130 audit(1792559413.440:442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-4135-10.0.0.11:22-109.160.32.128:37348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:13.593136 sshd[3920]: Invalid user user from 109.160.32.128 port 37348 Oct 21 05:10:13.632121 sshd[3920]: Connection closed by invalid user user 109.160.32.128 port 37348 [preauth] Oct 21 05:10:13.631000 audit[3920]: AUDIT1109 pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:13.635473 systemd[1]: sshd@71-4135-10.0.0.11:22-109.160.32.128:37348.service: Deactivated successfully. Oct 21 05:10:13.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-4135-10.0.0.11:22-109.160.32.128:37348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:13.638932 kernel: audit: type=1109 audit(1792559413.631:443): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:13.638990 kernel: audit: type=1131 audit(1792559413.634:444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-4135-10.0.0.11:22-109.160.32.128:37348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:14.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-34-10.0.0.11:22-98.64.94.113:53160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:14.540983 systemd[1]: Started sshd@72-34-10.0.0.11:22-98.64.94.113:53160.service - OpenSSH per-connection server daemon (98.64.94.113:53160). Oct 21 05:10:14.546678 kernel: audit: type=1130 audit(1792559414.539:445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-34-10.0.0.11:22-98.64.94.113:53160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:14.621000 audit[3926]: AUDIT1101 pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.623794 sshd[3926]: Accepted publickey for core from 98.64.94.113 port 53160 ssh2: RSA SHA256:XqL0tRhWS8c5uf2fwvBDj4dZYYeY2hnRFMi67U+4L5U Oct 21 05:10:14.626237 sshd-session[3926]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 21 05:10:14.624000 audit[3926]: AUDIT1103 pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.629395 kernel: audit: type=1101 audit(1792559414.621:446): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.629447 kernel: audit: type=1103 audit(1792559414.624:447): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.631544 kernel: audit: type=1006 audit(1792559414.624:448): pid=3926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 21 05:10:14.624000 audit[3926]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffff8f79640 a2=3 a3=0 items=0 ppid=1 pid=3926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:10:14.634726 kernel: audit: type=1300 audit(1792559414.624:448): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffff8f79640 a2=3 a3=0 items=0 ppid=1 pid=3926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 21 05:10:14.635105 systemd-logind[2513]: New session '25' of user 'core' with class 'user' and type 'tty'. Oct 21 05:10:14.624000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:10:14.636996 kernel: audit: type=1327 audit(1792559414.624:448): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 21 05:10:14.642807 systemd[1]: Started session-25.scope - Session 25 of User core. Oct 21 05:10:14.642000 audit[3926]: AUDIT1105 pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.643000 audit[3930]: AUDIT1103 pid=3930 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:14.651712 kernel: audit: type=1105 audit(1792559414.642:449): pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:18.315053 systemd[1]: Started sshd@73-4136-10.0.0.11:22-109.160.32.128:50278.service - OpenSSH per-connection server daemon (109.160.32.128:50278). Oct 21 05:10:18.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-4136-10.0.0.11:22-109.160.32.128:50278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:18.502045 sshd[3939]: Invalid user crafty from 109.160.32.128 port 50278 Oct 21 05:10:18.513599 sshd[3939]: Connection closed by invalid user crafty 109.160.32.128 port 50278 [preauth] Oct 21 05:10:18.512000 audit[3939]: AUDIT1109 pid=3939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:18.515373 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 21 05:10:18.515425 kernel: audit: type=1109 audit(1792559418.512:452): pid=3939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.128 addr=109.160.32.128 terminal=ssh res=failed' Oct 21 05:10:18.515575 systemd[1]: sshd@73-4136-10.0.0.11:22-109.160.32.128:50278.service: Deactivated successfully. Oct 21 05:10:18.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-4136-10.0.0.11:22-109.160.32.128:50278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:18.522819 kernel: audit: type=1131 audit(1792559418.514:453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-4136-10.0.0.11:22-109.160.32.128:50278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:19.684863 sshd[3930]: Connection closed by 98.64.94.113 port 53160 Oct 21 05:10:19.686167 sshd-session[3926]: pam_unix(sshd:session): session closed for user core Oct 21 05:10:19.684000 audit[3926]: AUDIT1106 pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:19.689536 systemd[1]: sshd@72-34-10.0.0.11:22-98.64.94.113:53160.service: Deactivated successfully. Oct 21 05:10:19.692047 systemd[1]: session-25.scope: Deactivated successfully. Oct 21 05:10:19.693007 systemd-logind[2513]: Session 25 logged out. Waiting for processes to exit. Oct 21 05:10:19.684000 audit[3926]: AUDIT1104 pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:19.695799 systemd-logind[2513]: Removed session 25. Oct 21 05:10:19.697187 kernel: audit: type=1106 audit(1792559419.684:454): pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:19.697239 kernel: audit: type=1104 audit(1792559419.684:455): pid=3926 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' Oct 21 05:10:19.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-34-10.0.0.11:22-98.64.94.113:53160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 21 05:10:19.701093 kernel: audit: type=1131 audit(1792559419.684:456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-34-10.0.0.11:22-98.64.94.113:53160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'