Oct 27 13:22:31.068374 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd490] Oct 27 13:22:31.068395 kernel: Linux version 6.12.114-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 15.2.1_p20260214 p5) 15.2.1 20260214, GNU ld (Gentoo 2.46.0 p1) 2.46.0) #1 SMP PREEMPT Tue Oct 27 09:18:12 -00 2026 Oct 27 13:22:31.068402 kernel: KASLR enabled Oct 27 13:22:31.068406 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 27 13:22:31.068410 kernel: printk: legacy bootconsole [pl11] enabled Oct 27 13:22:31.068414 kernel: efi: EFI v2.7 by EDK II Oct 27 13:22:31.068420 kernel: efi: ACPI 2.0=0x3f979018 SMBIOS=0x3f8a0000 SMBIOS 3.0=0x3f880000 MEMATTR=0x3e878018 RNG=0x3f979998 MEMRESERVE=0x3db7d798 Oct 27 13:22:31.068424 kernel: random: crng init done Oct 27 13:22:31.068428 kernel: secureboot: Secure boot disabled Oct 27 13:22:31.068432 kernel: ACPI: Early table checksum verification disabled Oct 27 13:22:31.068436 kernel: ACPI: RSDP 0x000000003F979018 000024 (v02 VRTUAL) Oct 27 13:22:31.068440 kernel: ACPI: XSDT 0x000000003F979F18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068444 kernel: ACPI: FACP 0x000000003F979C18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068448 kernel: ACPI: DSDT 0x000000003F95A018 01E046 (v02 MSFTVM DSDT01 00000001 INTL 20230628) Oct 27 13:22:31.068454 kernel: ACPI: DBG2 0x000000003F979B18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068459 kernel: ACPI: GTDT 0x000000003F979D98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068463 kernel: ACPI: OEM0 0x000000003F979098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068468 kernel: ACPI: SPCR 0x000000003F979A98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068472 kernel: ACPI: APIC 0x000000003F979818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068476 kernel: ACPI: SRAT 0x000000003F979198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068481 kernel: ACPI: PPTT 0x000000003F979418 00012C (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 27 13:22:31.068486 kernel: ACPI: BGRT 0x000000003F979E98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 27 13:22:31.068490 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 27 13:22:31.068494 kernel: ACPI: Use ACPI SPCR as default console: Yes Oct 27 13:22:31.068499 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 27 13:22:31.068503 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x1bfffffff] hotplug Oct 27 13:22:31.068507 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1c0000000-0xfbfffffff] hotplug Oct 27 13:22:31.068511 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 27 13:22:31.068516 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 27 13:22:31.068520 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 27 13:22:31.068524 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 27 13:22:31.068529 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 27 13:22:31.068534 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 27 13:22:31.068538 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 27 13:22:31.068542 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 27 13:22:31.068547 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 27 13:22:31.068552 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x1bfffffff] -> [mem 0x00000000-0x1bfffffff] Oct 27 13:22:31.068556 kernel: NODE_DATA(0) allocated [mem 0x1bf800a00-0x1bf807fff] Oct 27 13:22:31.068560 kernel: Zone ranges: Oct 27 13:22:31.068565 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 27 13:22:31.068572 kernel: DMA32 empty Oct 27 13:22:31.068576 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 27 13:22:31.068581 kernel: Device empty Oct 27 13:22:31.068585 kernel: Movable zone start for each node Oct 27 13:22:31.068590 kernel: Early memory node ranges Oct 27 13:22:31.068595 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 27 13:22:31.068600 kernel: node 0: [mem 0x0000000000824000-0x000000003f38ffff] Oct 27 13:22:31.068604 kernel: node 0: [mem 0x000000003f390000-0x000000003f943fff] Oct 27 13:22:31.068609 kernel: node 0: [mem 0x000000003f944000-0x000000003f9effff] Oct 27 13:22:31.068613 kernel: node 0: [mem 0x000000003f9f0000-0x000000003fdeffff] Oct 27 13:22:31.068618 kernel: node 0: [mem 0x000000003fdf0000-0x000000003fffffff] Oct 27 13:22:31.068622 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 27 13:22:31.068627 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 27 13:22:31.068631 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 27 13:22:31.068636 kernel: cma: Reserved 16 MiB at 0x000000003ca00000 on node -1 Oct 27 13:22:31.068640 kernel: psci: probing for conduit method from ACPI. Oct 27 13:22:31.068646 kernel: psci: PSCIv1.3 detected in firmware. Oct 27 13:22:31.068650 kernel: psci: Using standard PSCI v0.2 function IDs Oct 27 13:22:31.068655 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 27 13:22:31.068659 kernel: psci: SMC Calling Convention v1.4 Oct 27 13:22:31.068664 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node 0 Oct 27 13:22:31.068668 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node 0 Oct 27 13:22:31.068673 kernel: percpu: Embedded 34 pages/cpu s98968 r8192 d32104 u139264 Oct 27 13:22:31.068677 kernel: pcpu-alloc: s98968 r8192 d32104 u139264 alloc=34*4096 Oct 27 13:22:31.068682 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 27 13:22:31.068687 kernel: Detected PIPT I-cache on CPU0 Oct 27 13:22:31.068691 kernel: CPU features: detected: Address authentication (architected QARMA5 algorithm) Oct 27 13:22:31.068696 kernel: CPU features: detected: GIC system register CPU interface Oct 27 13:22:31.068701 kernel: CPU features: detected: Spectre-v4 Oct 27 13:22:31.068705 kernel: CPU features: detected: Spectre-BHB Oct 27 13:22:31.068710 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 27 13:22:31.068714 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 27 13:22:31.068719 kernel: CPU features: detected: ARM erratum 2067961 or 2054223 Oct 27 13:22:31.068723 kernel: CPU features: detected: Broken broadcast TLBI completion Oct 27 13:22:31.068728 kernel: CPU features: detected: SSBS not fully self-synchronizing Oct 27 13:22:31.068732 kernel: alternatives: applying boot alternatives Oct 27 13:22:31.068738 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=6ae5c5ebc899cb7e26ff0cf052d73929ebb0340d53d537c96a4957eafa5184f4 Oct 27 13:22:31.068744 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 27 13:22:31.068748 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 27 13:22:31.068753 kernel: Fallback order for Node 0: 0 Oct 27 13:22:31.068757 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1048540 Oct 27 13:22:31.068762 kernel: Policy zone: Normal Oct 27 13:22:31.068766 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 27 13:22:31.068771 kernel: software IO TLB: area num 2. Oct 27 13:22:31.068775 kernel: software IO TLB: mapped [mem 0x0000000034b40000-0x0000000038b40000] (64MB) Oct 27 13:22:31.068780 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 27 13:22:31.068784 kernel: ftrace: allocating 41447 entries in 164 pages Oct 27 13:22:31.068789 kernel: ftrace: allocated 164 pages with 3 groups Oct 27 13:22:31.068794 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 27 13:22:31.068800 kernel: rcu: RCU event tracing is enabled. Oct 27 13:22:31.068804 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 27 13:22:31.068809 kernel: Trampoline variant of Tasks RCU enabled. Oct 27 13:22:31.068813 kernel: Rude variant of Tasks RCU enabled. Oct 27 13:22:31.068818 kernel: Tracing variant of Tasks RCU enabled. Oct 27 13:22:31.068823 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 27 13:22:31.068827 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 27 13:22:31.068832 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 27 13:22:31.068836 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 27 13:22:31.068841 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Oct 27 13:22:31.068846 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 27 13:22:31.068851 kernel: GICv3: 960 SPIs implemented Oct 27 13:22:31.068855 kernel: GICv3: 0 Extended SPIs implemented Oct 27 13:22:31.068860 kernel: Root IRQ handler: gic_handle_irq Oct 27 13:22:31.068864 kernel: GICv3: GICv3 features: 16 PPIs, RSS Oct 27 13:22:31.068869 kernel: GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0 Oct 27 13:22:31.068873 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 27 13:22:31.068878 kernel: ITS: No ITS available, not enabling LPIs Oct 27 13:22:31.068882 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Oct 27 13:22:31.068887 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 27 13:22:31.068892 kernel: arch_timer: cp15 timer(s) running at 1000.00MHz (virt). Oct 27 13:22:31.068897 kernel: clocksource: arch_sys_counter: mask: 0x1fffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 27 13:22:31.068902 kernel: sched_clock: 61 bits at 1000MHz, resolution 1ns, wraps every 4398046511103ns Oct 27 13:22:31.068906 kernel: Console: colour dummy device 80x25 Oct 27 13:22:31.068911 kernel: printk: legacy console [tty1] enabled Oct 27 13:22:31.068916 kernel: ACPI: Core revision 20240827 Oct 27 13:22:31.068921 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 2000.00 BogoMIPS (lpj=1000000) Oct 27 13:22:31.068926 kernel: pid_max: default: 32768 minimum: 301 Oct 27 13:22:31.068931 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Oct 27 13:22:31.068940 kernel: landlock: Up and running. Oct 27 13:22:31.068945 kernel: SELinux: Initializing. Oct 27 13:22:31.068951 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 27 13:22:31.068956 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 27 13:22:31.068961 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0xa0000e, misc 0x31e1 Oct 27 13:22:31.068966 kernel: Hyper-V: Host Build 10.0.26102.3704-3-0 Oct 27 13:22:31.068971 kernel: Hyper-V: enabling crash_kexec_post_notifiers Oct 27 13:22:31.068976 kernel: rcu: Hierarchical SRCU implementation. Oct 27 13:22:31.068981 kernel: rcu: Max phase no-delay instances is 400. Oct 27 13:22:31.068986 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Oct 27 13:22:31.068991 kernel: Remapping and enabling EFI services. Oct 27 13:22:31.068996 kernel: smp: Bringing up secondary CPUs ... Oct 27 13:22:31.069001 kernel: Detected PIPT I-cache on CPU1 Oct 27 13:22:31.069006 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 27 13:22:31.069012 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd490] Oct 27 13:22:31.069017 kernel: smp: Brought up 1 node, 2 CPUs Oct 27 13:22:31.069022 kernel: SMP: Total of 2 processors activated. Oct 27 13:22:31.069027 kernel: CPU: All CPU(s) started at EL1 Oct 27 13:22:31.069032 kernel: CPU features: detected: 32-bit EL0 Support Oct 27 13:22:31.069037 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 27 13:22:31.069042 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 27 13:22:31.069048 kernel: CPU features: detected: Common not Private translations Oct 27 13:22:31.069053 kernel: CPU features: detected: CRC32 instructions Oct 27 13:22:31.069058 kernel: CPU features: detected: Generic authentication (architected QARMA5 algorithm) Oct 27 13:22:31.069063 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 27 13:22:31.069068 kernel: CPU features: detected: LSE atomic instructions Oct 27 13:22:31.069073 kernel: CPU features: detected: Privileged Access Never Oct 27 13:22:31.069078 kernel: CPU features: detected: Speculation barrier (SB) Oct 27 13:22:31.069084 kernel: CPU features: detected: TLB range maintenance instructions Oct 27 13:22:31.069089 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 27 13:22:31.069094 kernel: CPU features: detected: Scalable Vector Extension Oct 27 13:22:31.069115 kernel: alternatives: applying system-wide alternatives Oct 27 13:22:31.069120 kernel: CPU features: detected: Hardware dirty bit management on CPU0-1 Oct 27 13:22:31.069125 kernel: SVE: maximum available vector length 16 bytes per vector Oct 27 13:22:31.069130 kernel: SVE: default vector length 16 bytes per vector Oct 27 13:22:31.069136 kernel: Memory: 3976344K/4194160K available (12544K kernel code, 2482K rwdata, 9568K rodata, 13376K init, 1040K bss, 195864K reserved, 16384K cma-reserved) Oct 27 13:22:31.069141 kernel: devtmpfs: initialized Oct 27 13:22:31.069146 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 27 13:22:31.069151 kernel: 2G module region forced by RANDOMIZE_MODULE_REGION_FULL Oct 27 13:22:31.069156 kernel: 0 pages in range for non-PLT usage Oct 27 13:22:31.069161 kernel: 514480 pages in range for PLT usage Oct 27 13:22:31.069166 kernel: pinctrl core: initialized pinctrl subsystem Oct 27 13:22:31.069172 kernel: SMBIOS 3.1.0 present. Oct 27 13:22:31.069177 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 04/22/2026 Oct 27 13:22:31.069182 kernel: DMI: Memory slots populated: 2/2 Oct 27 13:22:31.069187 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 27 13:22:31.069192 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 27 13:22:31.069197 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 27 13:22:31.069202 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 27 13:22:31.069208 kernel: audit: initializing netlink subsys (disabled) Oct 27 13:22:31.069213 kernel: audit: type=2000 audit(0.058:1): state=initialized audit_enabled=0 res=1 Oct 27 13:22:31.069218 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 27 13:22:31.069222 kernel: cpuidle: using governor menu Oct 27 13:22:31.069227 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 27 13:22:31.069232 kernel: ASID allocator initialised with 32768 entries Oct 27 13:22:31.069237 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 27 13:22:31.069243 kernel: Serial: AMBA PL011 UART driver Oct 27 13:22:31.069248 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Oct 27 13:22:31.069253 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page Oct 27 13:22:31.069258 kernel: HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages Oct 27 13:22:31.069263 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page Oct 27 13:22:31.069268 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Oct 27 13:22:31.069273 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page Oct 27 13:22:31.069279 kernel: HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages Oct 27 13:22:31.069369 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page Oct 27 13:22:31.069382 kernel: ACPI: Added _OSI(Module Device) Oct 27 13:22:31.069388 kernel: ACPI: Added _OSI(Processor Device) Oct 27 13:22:31.069393 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 27 13:22:31.069399 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 27 13:22:31.069404 kernel: ACPI: Interpreter enabled Oct 27 13:22:31.069411 kernel: ACPI: Using GIC for interrupt routing Oct 27 13:22:31.069417 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 27 13:22:31.069422 kernel: printk: legacy console [ttyAMA0] enabled Oct 27 13:22:31.069427 kernel: printk: legacy bootconsole [pl11] disabled Oct 27 13:22:31.069432 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 27 13:22:31.069437 kernel: ACPI: CPU0 has been hot-added Oct 27 13:22:31.069442 kernel: ACPI: CPU1 has been hot-added Oct 27 13:22:31.069447 kernel: iommu: Default domain type: Translated Oct 27 13:22:31.069453 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 27 13:22:31.069458 kernel: efivars: Registered efivars operations Oct 27 13:22:31.069463 kernel: vgaarb: loaded Oct 27 13:22:31.069468 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 27 13:22:31.069473 kernel: VFS: Disk quotas dquot_6.6.0 Oct 27 13:22:31.069478 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 27 13:22:31.069483 kernel: pnp: PnP ACPI init Oct 27 13:22:31.069489 kernel: pnp: PnP ACPI: found 0 devices Oct 27 13:22:31.069494 kernel: NET: Registered PF_INET protocol family Oct 27 13:22:31.069499 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 27 13:22:31.069504 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 27 13:22:31.069509 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 27 13:22:31.069514 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 27 13:22:31.069519 kernel: TCP bind hash table entries: 32768 (order: 8, 1048576 bytes, linear) Oct 27 13:22:31.069525 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 27 13:22:31.069530 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 27 13:22:31.069535 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 27 13:22:31.069540 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 27 13:22:31.069545 kernel: PCI: CLS 0 bytes, default 64 Oct 27 13:22:31.069550 kernel: kvm [1]: HYP mode not available Oct 27 13:22:31.069555 kernel: Initialise system trusted keyrings Oct 27 13:22:31.069561 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 27 13:22:31.069566 kernel: Key type asymmetric registered Oct 27 13:22:31.069571 kernel: Asymmetric key parser 'x509' registered Oct 27 13:22:31.069576 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 27 13:22:31.069581 kernel: io scheduler mq-deadline registered Oct 27 13:22:31.069586 kernel: io scheduler kyber registered Oct 27 13:22:31.069591 kernel: io scheduler bfq registered Oct 27 13:22:31.069597 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 27 13:22:31.069602 kernel: ACPI: bus type drm_connector registered Oct 27 13:22:31.069607 kernel: thunder_xcv, ver 1.0 Oct 27 13:22:31.069612 kernel: thunder_bgx, ver 1.0 Oct 27 13:22:31.069617 kernel: nicpf, ver 1.0 Oct 27 13:22:31.069622 kernel: nicvf, ver 1.0 Oct 27 13:22:31.069789 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 27 13:22:31.069888 kernel: rtc-efi rtc-efi.0: setting system clock to 2026-10-27T13:22:26 UTC (1793107346) Oct 27 13:22:31.069895 kernel: efifb: probing for efifb Oct 27 13:22:31.069900 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 27 13:22:31.069906 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 27 13:22:31.069911 kernel: efifb: scrolling: redraw Oct 27 13:22:31.069916 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 27 13:22:31.069921 kernel: Console: switching to colour frame buffer device 128x48 Oct 27 13:22:31.069927 kernel: fb0: EFI VGA frame buffer device Oct 27 13:22:31.069932 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 27 13:22:31.069937 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 27 13:22:31.069943 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 (0,8000003f) counters available Oct 27 13:22:31.069948 kernel: watchdog: NMI not fully supported Oct 27 13:22:31.069953 kernel: watchdog: Hard watchdog permanently disabled Oct 27 13:22:31.069958 kernel: NET: Registered PF_INET6 protocol family Oct 27 13:22:31.069963 kernel: Segment Routing with IPv6 Oct 27 13:22:31.069968 kernel: In-situ OAM (IOAM) with IPv6 Oct 27 13:22:31.069973 kernel: NET: Registered PF_PACKET protocol family Oct 27 13:22:31.069978 kernel: Key type dns_resolver registered Oct 27 13:22:31.069983 kernel: registered taskstats version 1 Oct 27 13:22:31.069988 kernel: Loading compiled-in X.509 certificates Oct 27 13:22:31.069994 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.114-flatcar: ed62769400b81a0c6069a9a03a2299d9d4aef7c8' Oct 27 13:22:31.069999 kernel: Demotion targets for Node 0: null Oct 27 13:22:31.070004 kernel: Key type .fscrypt registered Oct 27 13:22:31.070009 kernel: Key type fscrypt-provisioning registered Oct 27 13:22:31.070014 kernel: integrity: secureboot mode disabled Oct 27 13:22:31.070019 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 27 13:22:31.070024 kernel: ima: Allocated hash algorithm: sha1 Oct 27 13:22:31.070029 kernel: ima: No architecture policies found Oct 27 13:22:31.070035 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 27 13:22:31.070040 kernel: clk: Disabling unused clocks Oct 27 13:22:31.070045 kernel: PM: genpd: Disabling unused power domains Oct 27 13:22:31.070050 kernel: Freeing unused kernel memory: 13376K Oct 27 13:22:31.070055 kernel: Run /init as init process Oct 27 13:22:31.070060 kernel: with arguments: Oct 27 13:22:31.070065 kernel: /init Oct 27 13:22:31.070070 kernel: with environment: Oct 27 13:22:31.070075 kernel: HOME=/ Oct 27 13:22:31.070080 kernel: TERM=linux Oct 27 13:22:31.070085 kernel: hv_vmbus: hv_mmio=[mem 0x40000000-0xfed3ffff],[mem 0xfc0000000-0xfffffffff] fb=[mem 0x40000000-0x47ffffff] Oct 27 13:22:31.070090 kernel: hv_vmbus: Vmbus version:5.3 Oct 27 13:22:31.072125 kernel: hv_vmbus: registering driver hid_hyperv Oct 27 13:22:31.072145 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Oct 27 13:22:31.072151 kernel: SCSI subsystem initialized Oct 27 13:22:31.072318 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 27 13:22:31.072328 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 27 13:22:31.072334 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Oct 27 13:22:31.072339 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 27 13:22:31.072344 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 27 13:22:31.072349 kernel: PTP clock support registered Oct 27 13:22:31.072357 kernel: hv_utils: Registering HyperV Utility Driver Oct 27 13:22:31.072362 kernel: hv_vmbus: registering driver hv_utils Oct 27 13:22:31.072367 kernel: hv_utils: Heartbeat IC version 3.0 Oct 27 13:22:31.072372 kernel: hv_utils: Shutdown IC version 3.2 Oct 27 13:22:31.072377 kernel: hv_utils: TimeSync IC version 4.0 Oct 27 13:22:31.072382 kernel: hv_vmbus: registering driver hv_storvsc Oct 27 13:22:31.072504 kernel: scsi host1: storvsc_host_t Oct 27 13:22:31.072611 kernel: scsi host0: storvsc_host_t Oct 27 13:22:31.072723 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 27 13:22:31.072832 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 Oct 27 13:22:31.072931 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 27 13:22:31.073030 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 27 13:22:31.073155 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 27 13:22:31.073255 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 27 13:22:31.073353 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 27 13:22:31.073360 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 27 13:22:31.073457 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 27 13:22:31.073556 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 27 13:22:31.073564 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 27 13:22:31.073661 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 27 13:22:31.073668 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 27 13:22:31.073673 kernel: device-mapper: uevent: version 1.0.3 Oct 27 13:22:31.073678 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Oct 27 13:22:31.073683 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:31.073688 kernel: raid6: neonx8 gen() 18550 MB/s Oct 27 13:22:31.073695 kernel: raid6: neonx4 gen() 18574 MB/s Oct 27 13:22:31.073700 kernel: raid6: neonx2 gen() 17047 MB/s Oct 27 13:22:31.073704 kernel: raid6: neonx1 gen() 15090 MB/s Oct 27 13:22:31.073709 kernel: raid6: int64x8 gen() 8978 MB/s Oct 27 13:22:31.073714 kernel: raid6: int64x4 gen() 10753 MB/s Oct 27 13:22:31.073719 kernel: raid6: int64x2 gen() 8850 MB/s Oct 27 13:22:31.073724 kernel: raid6: int64x1 gen() 7076 MB/s Oct 27 13:22:31.073730 kernel: raid6: using algorithm neonx4 gen() 18574 MB/s Oct 27 13:22:31.073735 kernel: raid6: .... xor() 15164 MB/s, rmw enabled Oct 27 13:22:31.073741 kernel: raid6: using neon recovery algorithm Oct 27 13:22:31.073746 kernel: xor: measuring software checksum speed Oct 27 13:22:31.073751 kernel: 8regs : 29559 MB/sec Oct 27 13:22:31.073756 kernel: 32regs : 29720 MB/sec Oct 27 13:22:31.073760 kernel: arm64_neon : 37131 MB/sec Oct 27 13:22:31.073765 kernel: xor: using function: arm64_neon (37131 MB/sec) Oct 27 13:22:31.073771 kernel: Btrfs loaded, zoned=no, fsverity=no Oct 27 13:22:31.073777 kernel: BTRFS: device fsid 3fcf614b-830c-406e-981b-5a3b77344914 devid 1 transid 40 /dev/mapper/usr (254:0) scanned by mount (369) Oct 27 13:22:31.073782 kernel: BTRFS info (device dm-0): first mount of filesystem 3fcf614b-830c-406e-981b-5a3b77344914 Oct 27 13:22:31.073787 kernel: BTRFS info (device dm-0): using crc32c (crc32c-generic) checksum algorithm Oct 27 13:22:31.073792 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time Oct 27 13:22:31.073797 kernel: BTRFS info (device dm-0 state E): enabling free space tree Oct 27 13:22:31.073802 kernel: loop: module loaded Oct 27 13:22:31.073808 kernel: loop0: detected capacity change from 0 to 100128 Oct 27 13:22:31.073813 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 27 13:22:31.073819 systemd[1]: Successfully made /usr/ read-only. Oct 27 13:22:31.073826 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Oct 27 13:22:31.073832 systemd[1]: Detected virtualization microsoft. Oct 27 13:22:31.073838 systemd[1]: Detected architecture arm64. Oct 27 13:22:31.073843 systemd[1]: Running in initrd. Oct 27 13:22:31.073848 systemd[1]: Initializing machine ID from random generator. Oct 27 13:22:31.073854 systemd[1]: No hostname configured, using default hostname. Oct 27 13:22:31.073859 systemd[1]: Hostname set to . Oct 27 13:22:31.073864 systemd[1]: Queued start job for default target initrd.target. Oct 27 13:22:31.073870 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 27 13:22:31.073876 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 27 13:22:31.073883 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Oct 27 13:22:31.073888 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Oct 27 13:22:31.073894 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Oct 27 13:22:31.073900 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Oct 27 13:22:31.073906 systemd[1]: Expecting device dev-mapper-usr.device - /dev/mapper/usr... Oct 27 13:22:31.073912 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 27 13:22:31.073917 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Oct 27 13:22:31.073922 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Oct 27 13:22:31.073928 systemd[1]: Reached target paths.target - Path Units. Oct 27 13:22:31.073933 systemd[1]: Reached target slices.target - Slice Units. Oct 27 13:22:31.073938 systemd[1]: Reached target swap.target - Swaps. Oct 27 13:22:31.073945 systemd[1]: Reached target timers.target - Timer Units. Oct 27 13:22:31.073955 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Oct 27 13:22:31.073961 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Oct 27 13:22:31.073967 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Oct 27 13:22:31.073973 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Oct 27 13:22:31.073979 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Oct 27 13:22:31.073985 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Oct 27 13:22:31.073990 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 27 13:22:31.073996 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Oct 27 13:22:31.074001 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Oct 27 13:22:31.074007 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Oct 27 13:22:31.074013 systemd[1]: Reached target sockets.target - Socket Units. Oct 27 13:22:31.074019 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments skipped, no trigger condition checks were met. Oct 27 13:22:31.074025 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Oct 27 13:22:31.074030 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Oct 27 13:22:31.074036 systemd[1]: Finished network-cleanup.service - Network Cleanup. Oct 27 13:22:31.074042 systemd[1]: systemd-battery-check.service - Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply Oct 27 13:22:31.074047 systemd[1]: Starting systemd-journald.service - Journal Service... Oct 27 13:22:31.074054 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Oct 27 13:22:31.074074 systemd-journald[483]: Collecting audit messages is enabled. Oct 27 13:22:31.074088 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:22:31.074112 systemd-journald[483]: Journal started Oct 27 13:22:31.074127 systemd-journald[483]: Runtime Journal (/run/log/journal/05ce4ac60b6c4122a98c1eefdbf27daa) is 8M, max 78.3M, 70.3M free. Oct 27 13:22:31.081496 systemd-modules-load[485]: Using 2 probe threads Oct 27 13:22:31.089384 systemd[1]: Started systemd-journald.service - Journal Service. Oct 27 13:22:31.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.096379 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Oct 27 13:22:31.115168 kernel: audit: type=1130 audit(1793107351.092:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.117345 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Oct 27 13:22:31.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.135620 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Oct 27 13:22:31.162194 kernel: audit: type=1130 audit(1793107351.114:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.162216 kernel: audit: type=1130 audit(1793107351.133:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.168270 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Oct 27 13:22:31.193135 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 27 13:22:31.214347 systemd-modules-load[485]: Inserted module 'br_netfilter' Oct 27 13:22:31.214937 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Oct 27 13:22:31.227212 kernel: Bridge firewalling registered Oct 27 13:22:31.225141 systemd-vconsole-setup[486]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 27 13:22:31.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.229348 systemd-tmpfiles[493]: /usr/lib/tmpfiles.d/systemd.conf:30: Duplicate line for path "/var/lib/systemd", ignoring. Oct 27 13:22:31.229392 systemd-tmpfiles[493]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Oct 27 13:22:31.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.283157 kernel: audit: type=1130 audit(1793107351.232:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.252234 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:22:31.287987 kernel: audit: type=1130 audit(1793107351.264:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.287895 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 27 13:22:31.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.312229 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 27 13:22:31.317664 kernel: audit: type=1130 audit(1793107351.292:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.337124 kernel: audit: type=1130 audit(1793107351.322:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.337288 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Oct 27 13:22:31.351561 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Oct 27 13:22:31.360989 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Oct 27 13:22:31.390635 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 27 13:22:31.390766 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Oct 27 13:22:31.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.418294 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 27 13:22:31.423934 kernel: audit: type=1130 audit(1793107351.404:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.440202 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Oct 27 13:22:31.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.465705 kernel: audit: type=1131 audit(1793107351.404:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.459047 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Oct 27 13:22:31.470148 kernel: audit: type=1130 audit(1793107351.439:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.474000 audit: BPF prog-id=5 op=LOAD Oct 27 13:22:31.477250 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Oct 27 13:22:31.491668 dracut-cmdline[514]: dracut-110 Oct 27 13:22:31.491668 dracut-cmdline[514]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=6ae5c5ebc899cb7e26ff0cf052d73929ebb0340d53d537c96a4957eafa5184f4 Oct 27 13:22:31.741970 systemd-resolved[515]: Positive Trust Anchors: Oct 27 13:22:31.741986 systemd-resolved[515]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 27 13:22:31.741989 systemd-resolved[515]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Oct 27 13:22:31.742009 systemd-resolved[515]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Oct 27 13:22:31.868059 systemd-resolved[515]: Defaulting to hostname 'linux'. Oct 27 13:22:31.870163 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Oct 27 13:22:31.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:31.882390 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Oct 27 13:22:31.935123 kernel: Loading iSCSI transport class v2.0-870. Oct 27 13:22:31.979387 kernel: iscsi: registered transport (tcp) Oct 27 13:22:32.012931 kernel: iscsi: registered transport (qla4xxx) Oct 27 13:22:32.012949 kernel: QLogic iSCSI HBA Driver Oct 27 13:22:32.054814 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Oct 27 13:22:32.077204 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 27 13:22:32.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.083368 systemd[1]: Reached target network-pre.target - Preparation for Network. Oct 27 13:22:32.174551 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Oct 27 13:22:32.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.180469 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Oct 27 13:22:32.196554 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Oct 27 13:22:32.218845 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Oct 27 13:22:32.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.228000 audit: BPF prog-id=6 op=LOAD Oct 27 13:22:32.228000 audit: BPF prog-id=7 op=LOAD Oct 27 13:22:32.230427 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 27 13:22:32.317177 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Oct 27 13:22:32.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.415218 systemd-udevd[722]: Using default interface naming scheme 'v260'. Oct 27 13:22:32.471293 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 27 13:22:32.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.484234 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Oct 27 13:22:32.502000 audit: BPF prog-id=8 op=LOAD Oct 27 13:22:32.503898 systemd[1]: Starting systemd-networkd.service - Network Management... Oct 27 13:22:32.519190 dracut-pre-trigger[860]: rd.md=0: removing MD RAID activation Oct 27 13:22:32.539554 systemd-networkd[867]: Failed to open nftables netlink socket. IPMasquerade= and NFTSet= settings will not be applied. Ignoring: Protocol not supported Oct 27 13:22:32.548120 systemd-networkd[867]: lo: Link UP Oct 27 13:22:32.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.548122 systemd-networkd[867]: lo: Gained carrier Oct 27 13:22:32.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.550869 systemd[1]: Started systemd-networkd.service - Network Management. Oct 27 13:22:32.555529 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Oct 27 13:22:32.562963 systemd[1]: Reached target network.target - Network. Oct 27 13:22:32.569665 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Oct 27 13:22:32.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.651359 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Oct 27 13:22:32.658090 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Oct 27 13:22:32.769131 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#78 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Oct 27 13:22:32.786556 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 27 13:22:32.790739 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:22:32.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.809616 kernel: hv_vmbus: registering driver hv_netvsc Oct 27 13:22:32.801484 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:22:32.817169 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:22:32.841579 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 27 13:22:32.842039 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:22:32.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.858759 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:22:32.880108 kernel: hv_netvsc 002248c0-aa2e-0022-48c0-aa2e002248c0 eth0: VF slot 1 added Oct 27 13:22:32.890655 systemd-networkd[867]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 27 13:22:32.890665 systemd-networkd[867]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 27 13:22:32.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:32.892167 systemd-vconsole-setup[949]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 27 13:22:32.901362 systemd-networkd[867]: eth0: Link UP Oct 27 13:22:32.901393 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:22:32.901667 systemd-networkd[867]: eth0: Gained carrier Oct 27 13:22:32.901679 systemd-networkd[867]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 27 13:22:32.944149 systemd-networkd[867]: eth0: DHCPv4 address 10.0.0.24/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 27 13:22:32.958901 kernel: hv_vmbus: registering driver hv_pci Oct 27 13:22:32.958924 kernel: hv_pci bbdf8342-4db6-49ca-96db-acff6104dbd5: PCI VMBus probing: Using version 0x10004 Oct 27 13:22:32.969642 kernel: hv_pci bbdf8342-4db6-49ca-96db-acff6104dbd5: PCI host bridge to bus 4db6:00 Oct 27 13:22:32.969805 kernel: pci_bus 4db6:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 27 13:22:32.974983 kernel: pci_bus 4db6:00: No busn resource found for root bus, will use [bus 00-ff] Oct 27 13:22:32.981300 kernel: pci 4db6:00:02.0: [15b3:101a] type 00 class 0x020000 PCIe Endpoint Oct 27 13:22:32.987182 kernel: pci 4db6:00:02.0: BAR 0 [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 27 13:22:32.991218 kernel: pci 4db6:00:02.0: enabling Extended Tags Oct 27 13:22:33.008180 kernel: pci 4db6:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 4db6:00:02.0 (capable of 252.048 Gb/s with 16.0 GT/s PCIe x16 link) Oct 27 13:22:33.017707 kernel: pci_bus 4db6:00: busn_res: [bus 00-ff] end is updated to 00 Oct 27 13:22:33.017872 kernel: pci 4db6:00:02.0: BAR 0 [mem 0xfc0000000-0xfc00fffff 64bit pref]: assigned Oct 27 13:22:33.217765 kernel: mlx5_core 4db6:00:02.0: enabling device (0000 -> 0002) Oct 27 13:22:33.226241 kernel: mlx5_core 4db6:00:02.0: PTM is not supported by PCIe Oct 27 13:22:33.226401 kernel: mlx5_core 4db6:00:02.0: firmware version: 16.30.5026 Oct 27 13:22:33.353722 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - Virtual_Disk USR-A. Oct 27 13:22:33.360893 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Oct 27 13:22:33.425856 kernel: hv_netvsc 002248c0-aa2e-0022-48c0-aa2e002248c0 eth0: VF registering: eth1 Oct 27 13:22:33.426086 kernel: mlx5_core 4db6:00:02.0 eth1: joined to eth0 Oct 27 13:22:33.432116 kernel: mlx5_core 4db6:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0 basic) Oct 27 13:22:33.444112 kernel: mlx5_core 4db6:00:02.0 enP19894s1: renamed from eth1 Oct 27 13:22:33.444268 systemd-networkd[867]: eth1: Interface name change detected, renamed to enP19894s1. Oct 27 13:22:33.489491 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - Virtual_Disk OEM. Oct 27 13:22:33.500661 systemd[1]: Mounting oem.mount - /oem... Oct 27 13:22:33.521789 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - Virtual_Disk EFI-SYSTEM. Oct 27 13:22:33.549112 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (1003) Oct 27 13:22:33.554988 kernel: BTRFS info (device sda6): first mount of filesystem ea5ddb56-40f5-4347-9802-55b0b42a8eb7 Oct 27 13:22:33.554362 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - Virtual_Disk ROOT. Oct 27 13:22:33.570725 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 27 13:22:33.614166 kernel: mlx5_core 4db6:00:02.0 enP19894s1: Link up Oct 27 13:22:33.641114 kernel: BTRFS info (device sda6): turning on async discard Oct 27 13:22:33.641160 kernel: BTRFS info (device sda6): enabling free space tree Oct 27 13:22:33.648120 kernel: hv_netvsc 002248c0-aa2e-0022-48c0-aa2e002248c0 eth0: Data path switched to VF: enP19894s1 Oct 27 13:22:33.652285 systemd[1]: Mounted oem.mount - /oem. Oct 27 13:22:33.658132 systemd-networkd[867]: enP19894s1: Link UP Oct 27 13:22:33.686744 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Oct 27 13:22:33.770121 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Oct 27 13:22:33.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:33.780142 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Oct 27 13:22:33.785210 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 27 13:22:33.794557 systemd[1]: Reached target remote-fs.target - Remote File Systems. Oct 27 13:22:33.803689 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Oct 27 13:22:33.830203 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Oct 27 13:22:33.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:33.907331 systemd-networkd[867]: enP19894s1: Gained carrier Oct 27 13:22:34.644026 disk-uuid[986]: Warning: The kernel is still using the old partition table. Oct 27 13:22:34.644026 disk-uuid[986]: The new table will be used at the next reboot or after you Oct 27 13:22:34.644026 disk-uuid[986]: run partprobe(8) or kpartx(8) Oct 27 13:22:34.644026 disk-uuid[986]: The operation has completed successfully. Oct 27 13:22:34.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:34.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:34.656065 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 27 13:22:34.656412 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Oct 27 13:22:34.664891 systemd[1]: Mounting boot.mount - Boot partition... Oct 27 13:22:34.738438 systemd[1]: Mounted boot.mount - Boot partition. Oct 27 13:22:34.939205 systemd-networkd[867]: eth0: Gained IPv6LL Oct 27 13:22:34.987763 ignition[1098]: Ignition 2.24.0 Oct 27 13:22:34.987774 ignition[1098]: Stage: fetch-offline Oct 27 13:22:34.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:34.990580 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Oct 27 13:22:34.988002 ignition[1098]: no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:34.996464 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Oct 27 13:22:34.988011 ignition[1098]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:34.988140 ignition[1098]: parsed url from cmdline: "" Oct 27 13:22:34.988144 ignition[1098]: no config URL provided Oct 27 13:22:34.988147 ignition[1098]: reading system config file "/usr/lib/ignition/user.ign" Oct 27 13:22:34.988173 ignition[1098]: no config at "/usr/lib/ignition/user.ign" Oct 27 13:22:34.988177 ignition[1098]: failed to fetch config: resource requires networking Oct 27 13:22:34.988329 ignition[1098]: Ignition finished successfully Oct 27 13:22:35.032646 ignition[1168]: Ignition 2.24.0 Oct 27 13:22:35.032651 ignition[1168]: Stage: fetch Oct 27 13:22:35.032830 ignition[1168]: no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:35.032836 ignition[1168]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:35.032895 ignition[1168]: parsed url from cmdline: "" Oct 27 13:22:35.032898 ignition[1168]: no config URL provided Oct 27 13:22:35.032901 ignition[1168]: reading system config file "/usr/lib/ignition/user.ign" Oct 27 13:22:35.032908 ignition[1168]: no config at "/usr/lib/ignition/user.ign" Oct 27 13:22:35.032921 ignition[1168]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 27 13:22:35.091538 ignition[1168]: GET result: OK Oct 27 13:22:35.091579 ignition[1168]: config has been read from IMDS userdata Oct 27 13:22:35.091585 ignition[1168]: parsing config with SHA512: 2dad6162081ed17ea2b702dba87ea8c8786966ecb07617a435a0b2a1ab41f7836e0c00616881e7207a9c7ee6d0e7644294ea7ee31adf4e3cf783e9d4833278fb Oct 27 13:22:35.095883 unknown[1168]: fetched base config from "system" Oct 27 13:22:35.096067 ignition[1168]: fetch: fetch complete Oct 27 13:22:35.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.095889 unknown[1168]: fetched base config from "system" Oct 27 13:22:35.096071 ignition[1168]: fetch: fetch passed Oct 27 13:22:35.095896 unknown[1168]: fetched user config from "azure" Oct 27 13:22:35.096123 ignition[1168]: Ignition finished successfully Oct 27 13:22:35.097806 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Oct 27 13:22:35.105711 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Oct 27 13:22:35.138291 ignition[1174]: Ignition 2.24.0 Oct 27 13:22:35.138307 ignition[1174]: Stage: kargs Oct 27 13:22:35.138468 ignition[1174]: no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:35.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.143866 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Oct 27 13:22:35.138475 ignition[1174]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:35.148821 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Oct 27 13:22:35.138770 ignition[1174]: kargs: kargs passed Oct 27 13:22:35.138805 ignition[1174]: Ignition finished successfully Oct 27 13:22:35.201850 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 27 13:22:35.202002 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Oct 27 13:22:35.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.211130 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 27 13:22:35.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.211266 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Oct 27 13:22:35.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.219728 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 27 13:22:35.219839 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Oct 27 13:22:35.229316 systemd[1]: Unmounting oem.mount - /oem... Oct 27 13:22:35.260113 kernel: BTRFS info (device sda6): last unmount of filesystem ea5ddb56-40f5-4347-9802-55b0b42a8eb7 Oct 27 13:22:35.260539 systemd[1]: oem.mount: Deactivated successfully. Oct 27 13:22:35.260854 systemd[1]: Unmounted oem.mount - /oem. Oct 27 13:22:35.286921 ignition[1185]: Ignition 2.24.0 Oct 27 13:22:35.287666 ignition[1185]: Stage: disks Oct 27 13:22:35.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.289444 systemd[1]: Finished ignition-disks.service - Ignition (disks). Oct 27 13:22:35.287865 ignition[1185]: no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:35.294496 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Oct 27 13:22:35.287871 ignition[1185]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:35.301178 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Oct 27 13:22:35.288199 ignition[1185]: disks: disks passed Oct 27 13:22:35.310044 systemd[1]: Reached target local-fs.target - Local File Systems. Oct 27 13:22:35.288236 ignition[1185]: Ignition finished successfully Oct 27 13:22:35.317862 systemd[1]: Reached target sysinit.target - System Initialization. Oct 27 13:22:35.326409 systemd[1]: Reached target basic.target - Basic System. Oct 27 13:22:35.335874 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Oct 27 13:22:35.530989 systemd-fsck[1193]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks Oct 27 13:22:35.539067 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Oct 27 13:22:35.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:35.545440 systemd[1]: Mounting sysroot.mount - /sysroot... Oct 27 13:22:35.888117 kernel: EXT4-fs (sda9): mounted filesystem 0413b0b8-736c-49c2-898c-b9e89574e8c7 r/w with ordered data mode. Quota mode: none. Oct 27 13:22:35.889382 systemd[1]: Mounted sysroot.mount - /sysroot. Oct 27 13:22:35.893228 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Oct 27 13:22:35.916906 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Oct 27 13:22:35.920881 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... Oct 27 13:22:35.930186 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition skipped, unmet condition check ConditionPathIsReadWrite=!/sysroot Oct 27 13:22:35.930219 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Oct 27 13:22:35.954587 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Oct 27 13:22:35.960253 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Oct 27 13:22:36.433007 systemd-tmpfiles[1228]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:1: Duplicate line for path "/sysroot/var", ignoring. Oct 27 13:22:36.433031 systemd-tmpfiles[1228]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:7: Duplicate line for path "/sysroot/var/empty", ignoring. Oct 27 13:22:36.433089 systemd-tmpfiles[1228]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:28: Duplicate line for path "/sysroot/var/log", ignoring. Oct 27 13:22:36.555921 coreos-metadata[1209]: Oct 27 13:22:36.555 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 27 13:22:36.563073 coreos-metadata[1209]: Oct 27 13:22:36.562 INFO Fetch successful Oct 27 13:22:36.563073 coreos-metadata[1209]: Oct 27 13:22:36.563 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 27 13:22:36.574775 coreos-metadata[1209]: Oct 27 13:22:36.574 INFO Fetch successful Oct 27 13:22:36.590397 coreos-metadata[1209]: Oct 27 13:22:36.590 INFO wrote hostname ci-4757.2.3-a-7b169ef668 to /sysroot/etc/hostname Oct 27 13:22:36.597685 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Oct 27 13:22:36.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:36.610678 kernel: kauditd_printk_skb: 30 callbacks suppressed Oct 27 13:22:36.610695 kernel: audit: type=1130 audit(1793107356.602:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:37.712120 kernel: loop1: detected capacity change from 0 to 44328 Oct 27 13:22:37.734362 kernel: loop1: p1 p2 p3 Oct 27 13:22:38.098406 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.098450 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:38.102847 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:38.105966 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:38.106288 systemd-confext[1292]: device-mapper: reload ioctl on loop1p1-14-verity (254:1) failed: Invalid argument Oct 27 13:22:38.136121 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.233146 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Oct 27 13:22:38.258127 kernel: loop2: detected capacity change from 0 to 44328 Oct 27 13:22:38.269121 kernel: loop2: p1 p2 p3 Oct 27 13:22:38.279267 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.279309 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:38.285399 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:38.289581 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:38.289779 (sd-merge)[1302]: device-mapper: reload ioctl on loop2p1-18-verity (254:1) failed: Invalid argument Oct 27 13:22:38.307145 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.320725 (sd-merge)[1302]: Using extensions '00-flatcar-default.raw'. Oct 27 13:22:38.325092 (sd-merge)[1302]: Merged extensions into '/sysroot/etc'. Oct 27 13:22:38.330372 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Oct 27 13:22:38.330489 initrd-setup-root[1309]: /etc 00-flatcar-default Tue 2026-10-27 13:22:31 UTC Oct 27 13:22:38.331809 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Oct 27 13:22:38.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.357123 kernel: audit: type=1130 audit(1793107358.339:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.356206 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Oct 27 13:22:38.405015 ignition[1313]: INFO : Ignition 2.24.0 Oct 27 13:22:38.405015 ignition[1313]: INFO : Stage: mount Oct 27 13:22:38.411555 ignition[1313]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:38.411555 ignition[1313]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:38.411555 ignition[1313]: INFO : mount: mount passed Oct 27 13:22:38.411555 ignition[1313]: INFO : Ignition finished successfully Oct 27 13:22:38.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.409434 systemd[1]: Finished ignition-mount.service - Ignition (mount). Oct 27 13:22:38.451031 kernel: audit: type=1130 audit(1793107358.415:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.431315 systemd[1]: Starting ignition-files.service - Ignition (files)... Oct 27 13:22:38.459456 systemd[1]: Mounting oem.mount - /oem... Oct 27 13:22:38.480136 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (1321) Oct 27 13:22:38.490695 kernel: BTRFS info (device sda6): first mount of filesystem ea5ddb56-40f5-4347-9802-55b0b42a8eb7 Oct 27 13:22:38.490721 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 27 13:22:38.500327 kernel: BTRFS info (device sda6): turning on async discard Oct 27 13:22:38.500366 kernel: BTRFS info (device sda6): enabling free space tree Oct 27 13:22:38.502080 systemd[1]: Mounted oem.mount - /oem. Oct 27 13:22:38.509694 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Oct 27 13:22:38.526628 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Oct 27 13:22:38.555147 ignition[1339]: INFO : Ignition 2.24.0 Oct 27 13:22:38.555147 ignition[1339]: INFO : Stage: files Oct 27 13:22:38.561397 ignition[1339]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:38.561397 ignition[1339]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:38.561397 ignition[1339]: DEBUG : files: compiled without relabeling support, skipping Oct 27 13:22:38.561397 ignition[1339]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 27 13:22:38.561397 ignition[1339]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 27 13:22:38.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.602205 ignition[1339]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: createResultFile: createFiles: op(4): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: createResultFile: createFiles: op(4): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 27 13:22:38.602205 ignition[1339]: INFO : files: files passed Oct 27 13:22:38.602205 ignition[1339]: INFO : Ignition finished successfully Oct 27 13:22:38.573479 unknown[1339]: wrote ssh authorized keys file for user: core Oct 27 13:22:38.668378 kernel: audit: type=1130 audit(1793107358.585:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.576015 systemd[1]: Finished ignition-files.service - Ignition (files). Oct 27 13:22:38.608311 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Oct 27 13:22:38.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.642599 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Oct 27 13:22:38.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.710830 kernel: audit: type=1130 audit(1793107358.677:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.658749 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 27 13:22:38.715583 kernel: audit: type=1131 audit(1793107358.677:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:38.669203 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Oct 27 13:22:38.739386 initrd-setup-root-after-ignition[1372]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 27 13:22:38.739386 initrd-setup-root-after-ignition[1372]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Oct 27 13:22:38.752036 initrd-setup-root-after-ignition[1376]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 27 13:22:38.762121 kernel: loop3: detected capacity change from 0 to 44328 Oct 27 13:22:38.772122 kernel: loop3: p1 p2 p3 Oct 27 13:22:38.785763 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.785792 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:38.791536 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:38.795258 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:38.795670 systemd-confext[1378]: device-mapper: reload ioctl on loop3p1-21-verity (254:2) failed: Invalid argument Oct 27 13:22:38.811129 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.826119 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Oct 27 13:22:38.853120 kernel: loop4: detected capacity change from 0 to 44328 Oct 27 13:22:38.868123 kernel: loop4: p1 p2 p3 Oct 27 13:22:38.881229 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.881266 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:38.886675 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:38.889871 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:38.890092 (sd-merge)[1387]: device-mapper: reload ioctl on loop4p1-25-verity (254:2) failed: Invalid argument Oct 27 13:22:38.901122 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:38.916665 (sd-merge)[1387]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 27 13:22:38.923155 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Oct 27 13:22:39.022230 kernel: loop4: detected capacity change from 0 to 172608 Oct 27 13:22:39.079122 kernel: loop4: p1 p2 p3 Oct 27 13:22:39.493893 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:39.493949 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:39.498689 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:39.501793 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:39.502002 systemd-sysext[1395]: device-mapper: reload ioctl on loop4p1-29-verity (254:2) failed: Invalid argument Oct 27 13:22:39.512337 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:39.644114 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 27 13:22:39.681127 kernel: loop5: detected capacity change from 0 to 364712 Oct 27 13:22:39.771137 kernel: loop5: p1 p2 p3 Oct 27 13:22:39.998759 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:39.998825 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:40.003421 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:40.006925 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:40.007146 systemd-sysext[1395]: device-mapper: reload ioctl on loop5p1-33-verity (254:2) failed: Invalid argument Oct 27 13:22:40.013574 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:40.257172 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 27 13:22:40.395113 kernel: loop6: detected capacity change from 0 to 142648 Oct 27 13:22:40.460117 kernel: loop6: p1 p2 p3 Oct 27 13:22:40.848970 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:40.849025 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:40.853625 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:40.856851 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:40.857055 systemd-sysext[1395]: device-mapper: reload ioctl on loop6p1-37-verity (254:2) failed: Invalid argument Oct 27 13:22:40.867131 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:40.926122 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 27 13:22:40.962129 kernel: loop7: detected capacity change from 0 to 172608 Oct 27 13:22:40.970111 kernel: loop7: p1 p2 p3 Oct 27 13:22:40.996114 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:40.996160 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:40.996169 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:41.003655 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:41.003840 (sd-merge)[1418]: device-mapper: reload ioctl on loop7p1-41-verity (254:2) failed: Invalid argument Oct 27 13:22:41.017399 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:41.058135 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Oct 27 13:22:41.062108 kernel: loop1: detected capacity change from 0 to 364712 Oct 27 13:22:41.075122 kernel: loop1: p1 p2 p3 Oct 27 13:22:41.094198 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:41.094240 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:41.094250 kernel: device-mapper: table: 254:3: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:41.104039 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:41.104090 (sd-merge)[1418]: device-mapper: reload ioctl on loop1p1-45-verity (254:3) failed: Invalid argument Oct 27 13:22:41.121120 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:41.155138 kernel: erofs: (device dm-3): mounted with root inode @ nid 39. Oct 27 13:22:41.161114 kernel: loop3: detected capacity change from 0 to 142648 Oct 27 13:22:41.172139 kernel: loop3: p1 p2 p3 Oct 27 13:22:41.185517 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:41.185555 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:41.191234 kernel: device-mapper: table: 254:4: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:41.194862 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:41.195222 (sd-merge)[1418]: device-mapper: reload ioctl on loop3p1-49-verity (254:4) failed: Invalid argument Oct 27 13:22:41.207347 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:41.236949 (sd-merge)[1418]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure-4757.2.3.raw'. Oct 27 13:22:41.237758 (sd-merge)[1418]: Merged extensions into '/sysroot/usr'. Oct 27 13:22:41.248345 kernel: erofs: (device dm-4): mounted with root inode @ nid 39. Oct 27 13:22:41.250172 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Oct 27 13:22:41.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.274524 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Oct 27 13:22:41.285986 kernel: audit: type=1130 audit(1793107361.255:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.311517 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 27 13:22:41.311680 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Oct 27 13:22:41.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.321200 systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. Oct 27 13:22:41.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.361968 kernel: audit: type=1130 audit(1793107361.320:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.321411 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Oct 27 13:22:41.370087 kernel: audit: type=1131 audit(1793107361.320:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.360972 systemd[1]: Starting dracut-mount.service - dracut mount hook... Oct 27 13:22:41.828079 systemd[1]: Finished dracut-mount.service - dracut mount hook. Oct 27 13:22:41.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.847614 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Oct 27 13:22:41.857617 kernel: audit: type=1130 audit(1793107361.831:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.870344 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Oct 27 13:22:41.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.891344 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Oct 27 13:22:41.900518 kernel: audit: type=1130 audit(1793107361.875:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:41.911909 systemd[1]: Stopped target basic.target - Basic System. Oct 27 13:22:41.919290 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Oct 27 13:22:41.928412 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Oct 27 13:22:41.937605 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Oct 27 13:22:41.946596 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Oct 27 13:22:41.951731 systemd[1]: Stopped target paths.target - Path Units. Oct 27 13:22:41.959543 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 27 13:22:41.967594 systemd[1]: Stopped target slices.target - Slice Units. Oct 27 13:22:41.975515 systemd[1]: Stopped target sockets.target - Socket Units. Oct 27 13:22:41.983197 systemd[1]: Stopped target sysinit.target - System Initialization. Oct 27 13:22:41.990801 systemd[1]: Stopped target local-fs.target - Local File Systems. Oct 27 13:22:41.998695 systemd[1]: Stopped target local-fs-pre.target - Preparation for Local File Systems. Oct 27 13:22:42.007477 systemd[1]: Stopped target swap.target - Swaps. Oct 27 13:22:42.015787 systemd[1]: Stopped target timers.target - Timer Units. Oct 27 13:22:42.022362 systemd[1]: iscsid.socket: Deactivated successfully. Oct 27 13:22:42.022507 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Oct 27 13:22:42.029811 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 27 13:22:42.029899 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Oct 27 13:22:42.037514 systemd[1]: systemd-coredump.socket: Deactivated successfully. Oct 27 13:22:42.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.037605 systemd[1]: Closed systemd-coredump.socket - Process Core Dump Socket. Oct 27 13:22:42.045802 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Oct 27 13:22:42.045894 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Oct 27 13:22:42.053701 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 27 13:22:42.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.120094 kernel: audit: type=1131 audit(1793107362.063:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.053825 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Oct 27 13:22:42.125497 kernel: audit: type=1131 audit(1793107362.105:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.079749 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Oct 27 13:22:42.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.146165 kernel: audit: type=1131 audit(1793107362.129:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.088041 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Oct 27 13:22:42.097408 systemd[1]: dracut-mount.service: Deactivated successfully. Oct 27 13:22:42.097566 systemd[1]: Stopped dracut-mount.service - dracut mount hook. Oct 27 13:22:42.120386 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 27 13:22:42.120487 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Oct 27 13:22:42.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.129911 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Oct 27 13:22:42.150528 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 27 13:22:42.150904 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 27 13:22:42.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.256126 kernel: audit: type=1131 audit(1793107362.188:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.161449 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 27 13:22:42.267334 kernel: audit: type=1131 audit(1793107362.216:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.169643 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Oct 27 13:22:42.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.286589 kernel: audit: type=1131 audit(1793107362.236:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.170022 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 27 13:22:42.295610 kernel: audit: type=1131 audit(1793107362.267:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.179895 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 27 13:22:42.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.323215 kernel: audit: type=1131 audit(1793107362.299:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.180076 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Oct 27 13:22:42.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.189004 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 27 13:22:42.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.342581 ignition[1460]: INFO : Ignition 2.24.0 Oct 27 13:22:42.342581 ignition[1460]: INFO : Stage: umount Oct 27 13:22:42.342581 ignition[1460]: INFO : no config dir at "/usr/lib/ignition/base.d" Oct 27 13:22:42.342581 ignition[1460]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 27 13:22:42.342581 ignition[1460]: INFO : umount: umount passed Oct 27 13:22:42.342581 ignition[1460]: INFO : Ignition finished successfully Oct 27 13:22:42.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.207014 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Oct 27 13:22:42.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.216838 systemd[1]: ignition-files.service: Deactivated successfully. Oct 27 13:22:42.216916 systemd[1]: Stopped ignition-files.service - Ignition (files). Oct 27 13:22:42.237151 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 27 13:22:42.237235 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Oct 27 13:22:42.423000 audit: BPF prog-id=5 op=UNLOAD Oct 27 13:22:42.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.283916 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Oct 27 13:22:42.290190 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 27 13:22:42.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.290337 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Oct 27 13:22:42.302234 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Oct 27 13:22:42.448000 audit: BPF prog-id=8 op=UNLOAD Oct 27 13:22:42.302357 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 27 13:22:42.324193 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 27 13:22:42.324323 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Oct 27 13:22:42.329434 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 27 13:22:42.329596 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Oct 27 13:22:42.340120 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 27 13:22:42.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.340238 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Oct 27 13:22:42.349461 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 27 13:22:42.351121 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Oct 27 13:22:42.357576 systemd[1]: Stopped target network.target - Network. Oct 27 13:22:42.365306 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 27 13:22:42.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.365355 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Oct 27 13:22:42.374477 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Oct 27 13:22:42.374506 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Oct 27 13:22:42.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.381589 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 27 13:22:42.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.381614 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Oct 27 13:22:42.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.389467 systemd[1]: Stopping systemd-networkd.service - Network Management... Oct 27 13:22:42.398798 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Oct 27 13:22:42.600057 kernel: hv_netvsc 002248c0-aa2e-0022-48c0-aa2e002248c0 eth0: Data path switched from VF: enP19894s1 Oct 27 13:22:42.413657 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 27 13:22:42.414000 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Oct 27 13:22:42.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.430312 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 27 13:22:42.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.430421 systemd[1]: Stopped systemd-networkd.service - Network Management. Oct 27 13:22:42.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.445947 systemd[1]: systemd-networkd-resolve-hook.socket: Deactivated successfully. Oct 27 13:22:42.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.446051 systemd[1]: Closed systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 27 13:22:42.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.454668 systemd[1]: Stopped target network-pre.target - Preparation for Network. Oct 27 13:22:42.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.464266 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 27 13:22:42.464306 systemd[1]: Closed systemd-networkd.socket - Network Management Netlink Socket. Oct 27 13:22:42.474426 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Oct 27 13:22:42.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:42.488541 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 27 13:22:42.488606 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Oct 27 13:22:42.498464 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 27 13:22:42.529071 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 27 13:22:42.531142 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 27 13:22:42.538319 systemd[1]: systemd-udevd.service: Consumed 1.066s CPU time over 10.298s wall clock time. Oct 27 13:22:42.538523 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 27 13:22:42.538562 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Oct 27 13:22:42.546570 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 27 13:22:42.546603 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Oct 27 13:22:42.559389 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 27 13:22:42.559430 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Oct 27 13:22:42.567615 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 27 13:22:42.567649 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Oct 27 13:22:42.586255 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Oct 27 13:22:42.604015 systemd[1]: systemd-network-generator.service: Deactivated successfully. Oct 27 13:22:42.604069 systemd[1]: Stopped systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 27 13:22:42.612210 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 27 13:22:42.612251 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 27 13:22:42.623918 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. Oct 27 13:22:42.623960 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 27 13:22:42.800484 systemd-journald[483]: Received SIGTERM from PID 1 (systemd). Oct 27 13:22:42.632804 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 27 13:22:42.632840 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Oct 27 13:22:42.642243 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 27 13:22:42.642291 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:22:42.651555 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 27 13:22:42.651663 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Oct 27 13:22:42.669821 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 27 13:22:42.669972 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Oct 27 13:22:42.678197 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Oct 27 13:22:42.686424 systemd[1]: Starting initrd-switch-root.service - Switch Root... Oct 27 13:22:42.714155 systemd[1]: Switching root. Oct 27 13:22:42.844367 systemd-journald[483]: Journal stopped Oct 27 13:22:56.672927 kernel: SELinux: policy capability network_peer_controls=1 Oct 27 13:22:56.672957 kernel: SELinux: policy capability open_perms=1 Oct 27 13:22:56.672966 kernel: SELinux: policy capability extended_socket_class=1 Oct 27 13:22:56.672971 kernel: SELinux: policy capability always_check_network=0 Oct 27 13:22:56.672977 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 27 13:22:56.672982 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 27 13:22:56.672990 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 27 13:22:56.672996 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 27 13:22:56.673002 kernel: SELinux: policy capability userspace_initial_context=0 Oct 27 13:22:56.673009 systemd[1]: Successfully loaded SELinux policy in 187.311ms. Oct 27 13:22:56.673016 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 6.025ms. Oct 27 13:22:56.673023 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Oct 27 13:22:56.673030 systemd[1]: Detected virtualization microsoft. Oct 27 13:22:56.673036 systemd[1]: Detected architecture arm64. Oct 27 13:22:56.673043 systemd[1]: Detected first boot. Oct 27 13:22:56.673050 systemd[1]: Initializing machine ID from random generator. Oct 27 13:22:56.673056 systemd[1]: Hostname set to . Oct 27 13:22:56.673063 zram_generator::config[1500]: No configuration found. Oct 27 13:22:56.673070 kernel: NET: Registered PF_VSOCK protocol family Oct 27 13:22:56.673076 systemd[1]: Applying preset policy. Oct 27 13:22:56.673084 systemd[1]: Populated /etc with preset unit settings. Oct 27 13:22:56.673091 kernel: kauditd_printk_skb: 30 callbacks suppressed Oct 27 13:22:56.673104 kernel: audit: type=1334 audit(1793107373.812:91): prog-id=10 op=LOAD Oct 27 13:22:56.673110 kernel: audit: type=1334 audit(1793107373.812:92): prog-id=2 op=UNLOAD Oct 27 13:22:56.673116 kernel: audit: type=1334 audit(1793107373.816:93): prog-id=11 op=LOAD Oct 27 13:22:56.673122 kernel: audit: type=1334 audit(1793107373.819:94): prog-id=12 op=LOAD Oct 27 13:22:56.673127 kernel: audit: type=1334 audit(1793107373.819:95): prog-id=3 op=UNLOAD Oct 27 13:22:56.673134 kernel: audit: type=1334 audit(1793107373.819:96): prog-id=4 op=UNLOAD Oct 27 13:22:56.673140 kernel: audit: type=1334 audit(1793107373.835:97): prog-id=10 op=UNLOAD Oct 27 13:22:56.673146 kernel: audit: type=1131 audit(1793107374.370:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.673152 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 27 13:22:56.673158 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Oct 27 13:22:56.673164 kernel: audit: type=1130 audit(1793107374.399:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.673171 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 27 13:22:56.673178 kernel: audit: type=1131 audit(1793107374.399:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.673184 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Oct 27 13:22:56.673191 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Oct 27 13:22:56.673197 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Oct 27 13:22:56.673203 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Oct 27 13:22:56.673211 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Oct 27 13:22:56.673219 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Oct 27 13:22:56.673226 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Oct 27 13:22:56.673232 systemd[1]: Created slice user.slice - User and Session Slice. Oct 27 13:22:56.673239 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Oct 27 13:22:56.673245 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Oct 27 13:22:56.673252 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Oct 27 13:22:56.673259 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Oct 27 13:22:56.673266 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Oct 27 13:22:56.673272 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Oct 27 13:22:56.673278 systemd[1]: Expecting device dev-ptp_hyperv.device - /dev/ptp_hyperv... Oct 27 13:22:56.673285 systemd[1]: Expecting device dev-ttyAMA0.device - /dev/ttyAMA0... Oct 27 13:22:56.673291 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Oct 27 13:22:56.673298 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Oct 27 13:22:56.673305 systemd[1]: Reached target imports.target - Image Downloads. Oct 27 13:22:56.673311 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Oct 27 13:22:56.673317 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Oct 27 13:22:56.673324 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Oct 27 13:22:56.673330 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Oct 27 13:22:56.673337 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Oct 27 13:22:56.673343 systemd[1]: Reached target remote-fs.target - Remote File Systems. Oct 27 13:22:56.673350 systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. Oct 27 13:22:56.673356 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Oct 27 13:22:56.673363 systemd[1]: Reached target slices.target - Slice Units. Oct 27 13:22:56.673371 systemd[1]: Reached target swap.target - Swaps. Oct 27 13:22:56.673377 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Oct 27 13:22:56.673384 systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Oct 27 13:22:56.673390 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Oct 27 13:22:56.673397 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Oct 27 13:22:56.673404 systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. Oct 27 13:22:56.673410 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Oct 27 13:22:56.673417 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Oct 27 13:22:56.673423 systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. Oct 27 13:22:56.673430 systemd[1]: Listening on systemd-networkd-varlink-metrics.socket - Network Management Metrics Varlink Socket. Oct 27 13:22:56.673436 systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. Oct 27 13:22:56.673443 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Oct 27 13:22:56.673450 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Oct 27 13:22:56.673457 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Oct 27 13:22:56.673463 systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. Oct 27 13:22:56.673470 systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. Oct 27 13:22:56.673476 systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. Oct 27 13:22:56.673482 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Oct 27 13:22:56.673489 systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. Oct 27 13:22:56.673496 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Oct 27 13:22:56.673503 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Oct 27 13:22:56.673510 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Oct 27 13:22:56.673516 systemd[1]: Mounting media.mount - External Media Directory... Oct 27 13:22:56.673523 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Oct 27 13:22:56.673529 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Oct 27 13:22:56.673536 systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. Oct 27 13:22:56.673543 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Oct 27 13:22:56.673549 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Oct 27 13:22:56.673556 systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. Oct 27 13:22:56.673562 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Oct 27 13:22:56.673569 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Oct 27 13:22:56.673575 systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Oct 27 13:22:56.673583 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Oct 27 13:22:56.673590 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Oct 27 13:22:56.673596 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf Oct 27 13:22:56.673603 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 27 13:22:56.673609 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Oct 27 13:22:56.673616 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 Oct 27 13:22:56.673622 systemd[1]: Starting systemd-journald.service - Journal Service... Oct 27 13:22:56.673630 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Oct 27 13:22:56.673636 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Oct 27 13:22:56.673644 systemd[1]: Reached target time-set.target - System Time Set. Oct 27 13:22:56.673650 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Oct 27 13:22:56.673657 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Oct 27 13:22:56.673663 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Oct 27 13:22:56.673671 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Oct 27 13:22:56.673677 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Oct 27 13:22:56.673683 systemd[1]: Mounted media.mount - External Media Directory. Oct 27 13:22:56.673690 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Oct 27 13:22:56.673696 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Oct 27 13:22:56.673703 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Oct 27 13:22:56.673709 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Oct 27 13:22:56.673716 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 27 13:22:56.673723 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Oct 27 13:22:56.673730 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Oct 27 13:22:56.673739 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Oct 27 13:22:56.673765 systemd-journald[1576]: Collecting audit messages is enabled. Oct 27 13:22:56.673784 systemd-journald[1576]: Journal started Oct 27 13:22:56.673799 systemd-journald[1576]: Runtime Journal (/run/log/journal/6c64707341fe4551830c2def84b3e215) is 8M, max 78.3M, 70.3M free. Oct 27 13:22:55.026000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Oct 27 13:22:56.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.374000 audit: BPF prog-id=12 op=UNLOAD Oct 27 13:22:56.374000 audit: BPF prog-id=11 op=UNLOAD Oct 27 13:22:56.374000 audit: BPF prog-id=13 op=LOAD Oct 27 13:22:56.374000 audit: BPF prog-id=14 op=LOAD Oct 27 13:22:56.374000 audit: BPF prog-id=15 op=LOAD Oct 27 13:22:56.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.668000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 27 13:22:56.668000 audit[1576]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=fffff8db4380 a2=4000 a3=0 items=0 ppid=1 pid=1576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:22:56.668000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 27 13:22:53.802363 systemd[1]: Queued start job for default target multi-user.target. Oct 27 13:22:53.821178 systemd[1]: Unnecessary job was removed for dev-sda6.device - /dev/sda6. Oct 27 13:22:53.822455 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 27 13:22:54.372060 systemd[1]: systemd-journald.service: Consumed 2.430s CPU time over 22.788s wall clock time. Oct 27 13:22:56.658793 systemd-modules-load[1578]: Using 2 probe threads Oct 27 13:22:56.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.683412 systemd[1]: Started systemd-journald.service - Journal Service. Oct 27 13:22:56.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.684366 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Oct 27 13:22:56.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.695459 systemd[1]: Reached target network-pre.target - Preparation for Network. Oct 27 13:22:56.700651 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Oct 27 13:22:56.706380 systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ Oct 27 13:22:56.799488 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Oct 27 13:22:56.811265 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Oct 27 13:22:56.816750 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore Oct 27 13:22:56.819738 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Oct 27 13:22:56.825674 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 27 13:22:56.825822 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Oct 27 13:22:56.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.830870 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Oct 27 13:22:56.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.836334 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Oct 27 13:22:56.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.847313 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Oct 27 13:22:56.862251 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Oct 27 13:22:56.868795 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Oct 27 13:22:56.880280 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Oct 27 13:22:56.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:56.995020 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Oct 27 13:22:56.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:57.000078 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Oct 27 13:22:57.014120 kernel: fuse: init (API version 7.41) Oct 27 13:22:57.014163 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 27 13:22:57.014324 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Oct 27 13:22:57.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:57.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:57.202888 systemd-journald[1576]: Time spent on flushing to /var/log/journal/6c64707341fe4551830c2def84b3e215 is 13.570ms for 1144 entries. Oct 27 13:22:57.202888 systemd-journald[1576]: System Journal (/var/log/journal/6c64707341fe4551830c2def84b3e215) is 8M, max 2.2G, 2.2G free. Oct 27 13:22:57.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:57.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:57.882182 systemd-journald[1576]: Received client request to flush runtime journal. Oct 27 13:22:57.554209 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Oct 27 13:22:57.567322 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Oct 27 13:22:57.575005 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Oct 27 13:22:57.700263 systemd-tmpfiles[1583]: ACLs are not supported, ignoring. Oct 27 13:22:57.700271 systemd-tmpfiles[1583]: ACLs are not supported, ignoring. Oct 27 13:22:57.702837 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Oct 27 13:22:57.883454 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Oct 27 13:22:57.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:58.655382 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Oct 27 13:22:58.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:58.665265 systemd[1]: Starting systemd-sysusers.service - Create System Users... Oct 27 13:22:59.372421 systemd[1]: Finished systemd-sysusers.service - Create System Users. Oct 27 13:22:59.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.380462 systemd[1]: Starting systemd-journalctl.socket - Journal Log Access Socket... Oct 27 13:22:59.381281 kernel: kauditd_printk_skb: 28 callbacks suppressed Oct 27 13:22:59.381320 kernel: audit: type=1130 audit(1793107379.376:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.398000 audit: BPF prog-id=16 op=LOAD Oct 27 13:22:59.398000 audit: BPF prog-id=17 op=LOAD Oct 27 13:22:59.404388 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Oct 27 13:22:59.407526 kernel: audit: type=1334 audit(1793107379.398:128): prog-id=16 op=LOAD Oct 27 13:22:59.407608 kernel: audit: type=1334 audit(1793107379.398:129): prog-id=17 op=LOAD Oct 27 13:22:59.398000 audit: BPF prog-id=18 op=LOAD Oct 27 13:22:59.411333 kernel: audit: type=1334 audit(1793107379.398:130): prog-id=18 op=LOAD Oct 27 13:22:59.416000 audit: BPF prog-id=19 op=LOAD Oct 27 13:22:59.420254 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Oct 27 13:22:59.423129 kernel: audit: type=1334 audit(1793107379.416:131): prog-id=19 op=LOAD Oct 27 13:22:59.428707 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Oct 27 13:22:59.434431 systemd[1]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Oct 27 13:22:59.447249 systemd[1]: Starting modprobe@tun.service - Load Kernel Module tun... Oct 27 13:22:59.453081 systemd-tmpfiles[1645]: ACLs are not supported, ignoring. Oct 27 13:22:59.453381 systemd-tmpfiles[1645]: ACLs are not supported, ignoring. Oct 27 13:22:59.452000 audit: BPF prog-id=20 op=LOAD Oct 27 13:22:59.454310 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Oct 27 13:22:59.452000 audit: BPF prog-id=21 op=LOAD Oct 27 13:22:59.466110 kernel: audit: type=1334 audit(1793107379.452:132): prog-id=20 op=LOAD Oct 27 13:22:59.466155 kernel: audit: type=1334 audit(1793107379.452:133): prog-id=21 op=LOAD Oct 27 13:22:59.452000 audit: BPF prog-id=22 op=LOAD Oct 27 13:22:59.470349 kernel: audit: type=1334 audit(1793107379.452:134): prog-id=22 op=LOAD Oct 27 13:22:59.471479 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Oct 27 13:22:59.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.480075 systemd[1]: proc-sys-fs-binfmt_misc.automount: Got automount request for /proc/sys/fs/binfmt_misc, triggered by 1647 ((systemd-userd)) Oct 27 13:22:59.480668 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Oct 27 13:22:59.496223 kernel: audit: type=1130 audit(1793107379.477:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.497440 systemd[1]: Mounting proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System... Oct 27 13:22:59.502224 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) skipped, unmet condition check ConditionPathExists=/var/lib/machines.raw Oct 27 13:22:59.502251 systemd[1]: Reached target local-fs.target - Local File Systems. Oct 27 13:22:59.506415 systemd[1]: Reached target machines.target - Virtual Machines and Containers. Oct 27 13:22:59.511891 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Oct 27 13:22:59.517620 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Oct 27 13:22:59.525215 systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... Oct 27 13:22:59.538642 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Oct 27 13:22:59.545407 systemd[1]: systemd-repart.service - Repartition Root Disk skipped, no trigger condition checks were met. Oct 27 13:22:59.548233 systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... Oct 27 13:22:59.652655 systemd[1]: Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System. Oct 27 13:22:59.658723 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats skipped, no trigger condition checks were met. Oct 27 13:22:59.671225 systemd[1]: Finished systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials. Oct 27 13:22:59.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.683240 kernel: loop4: detected capacity change from 0 to 44328 Oct 27 13:22:59.683273 kernel: audit: type=1130 audit(1793107379.679:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.701115 kernel: loop4: p1 p2 p3 Oct 27 13:22:59.701808 systemd[1]: Started systemd-userdbd.service - User Database Manager. Oct 27 13:22:59.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.818117 kernel: tun: Universal TUN/TAP device driver, 1.6 Oct 27 13:22:59.818678 systemd[1]: modprobe@tun.service: Deactivated successfully. Oct 27 13:22:59.818878 systemd[1]: Finished modprobe@tun.service - Load Kernel Module tun. Oct 27 13:22:59.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:22:59.822000 audit: BPF prog-id=23 op=LOAD Oct 27 13:22:59.822000 audit: BPF prog-id=24 op=LOAD Oct 27 13:22:59.822000 audit: BPF prog-id=25 op=LOAD Oct 27 13:22:59.824843 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Oct 27 13:22:59.838454 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:22:59.838516 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:22:59.843488 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:22:59.846754 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:22:59.846963 systemd-confext[1655]: device-mapper: reload ioctl on loop4p1-53-verity (254:5) failed: Invalid argument Oct 27 13:22:59.855113 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:00.014150 systemd-nsresourced[1665]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Oct 27 13:23:00.015131 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Oct 27 13:23:00.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:00.556764 systemd-oomd[1643]: No swap; memory pressure usage will be degraded Oct 27 13:23:00.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:00.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:00.557746 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Oct 27 13:23:00.636462 systemd-resolved[1644]: Positive Trust Anchors: Oct 27 13:23:00.636470 systemd-resolved[1644]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 27 13:23:00.636473 systemd-resolved[1644]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Oct 27 13:23:00.636494 systemd-resolved[1644]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Oct 27 13:23:00.840477 systemd-resolved[1644]: Using system hostname 'ci-4757.2.3-a-7b169ef668'. Oct 27 13:23:00.841982 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Oct 27 13:23:00.846711 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Oct 27 13:23:00.899776 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Oct 27 13:23:00.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:00.904000 audit: BPF prog-id=7 op=UNLOAD Oct 27 13:23:00.904000 audit: BPF prog-id=6 op=UNLOAD Oct 27 13:23:00.904000 audit: BPF prog-id=26 op=LOAD Oct 27 13:23:00.904000 audit: BPF prog-id=27 op=LOAD Oct 27 13:23:00.906498 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Oct 27 13:23:01.707831 systemd-udevd[1678]: Using default interface naming scheme 'v260'. Oct 27 13:23:02.895655 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 27 13:23:02.896722 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Oct 27 13:23:02.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:02.937631 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Oct 27 13:23:02.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:02.943000 audit: BPF prog-id=28 op=LOAD Oct 27 13:23:02.950775 systemd[1]: Starting systemd-networkd.service - Network Management... Oct 27 13:23:03.076592 systemd[1]: Condition check resulted in dev-ttyAMA0.device - /dev/ttyAMA0 being skipped. Oct 27 13:23:03.135125 kernel: mousedev: PS/2 mouse device common for all mice Oct 27 13:23:03.138264 systemd-networkd[1681]: lo: Link UP Oct 27 13:23:03.138271 systemd-networkd[1681]: lo: Gained carrier Oct 27 13:23:03.141237 systemd[1]: Started systemd-networkd.service - Network Management. Oct 27 13:23:03.141756 systemd-networkd[1681]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 27 13:23:03.141857 systemd-networkd[1681]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 27 13:23:03.148145 kernel: hv_vmbus: registering driver hv_balloon Oct 27 13:23:03.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.154769 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 27 13:23:03.154748 systemd[1]: Reached target network.target - Network. Oct 27 13:23:03.158750 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 27 13:23:03.162271 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Oct 27 13:23:03.172850 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Online... Oct 27 13:23:03.192123 kernel: hv_vmbus: registering driver hyperv_fb Oct 27 13:23:03.192194 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#96 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Oct 27 13:23:03.201290 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 27 13:23:03.209247 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 27 13:23:03.214309 kernel: Console: switching to colour dummy device 80x25 Oct 27 13:23:03.221635 kernel: Console: switching to colour frame buffer device 128x48 Oct 27 13:23:03.238068 systemd[1]: Condition check resulted in dev-ptp_hyperv.device - /dev/ptp_hyperv being skipped. Oct 27 13:23:03.240118 kernel: mlx5_core 4db6:00:02.0 enP19894s1: Link up Oct 27 13:23:03.262148 kernel: hv_netvsc 002248c0-aa2e-0022-48c0-aa2e002248c0 eth0: Data path switched to VF: enP19894s1 Oct 27 13:23:03.263662 systemd-networkd[1681]: enP19894s1: Link UP Oct 27 13:23:03.263814 systemd-networkd[1681]: eth0: Link UP Oct 27 13:23:03.263817 systemd-networkd[1681]: eth0: Gained carrier Oct 27 13:23:03.263832 systemd-networkd[1681]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 27 13:23:03.268387 systemd-networkd[1681]: enP19894s1: Gained carrier Oct 27 13:23:03.269864 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Oct 27 13:23:03.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.281364 systemd-networkd[1681]: eth0: DHCPv4 address 10.0.0.24/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 27 13:23:03.285667 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:23:03.298114 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 27 13:23:03.300508 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:23:03.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.315189 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:23:03.320119 kernel: MACsec IEEE 802.1AE Oct 27 13:23:03.398421 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Oct 27 13:23:03.440374 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - Virtual_Disk OEM. Oct 27 13:23:03.449242 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Oct 27 13:23:03.471177 kernel: loop4: detected capacity change from 0 to 44328 Oct 27 13:23:03.477114 kernel: loop4: p1 p2 p3 Oct 27 13:23:03.488634 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 27 13:23:03.488845 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:23:03.492936 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.498431 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.498471 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.512769 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.513198 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Oct 27 13:23:03.513641 (sd-merge)[1811]: device-mapper: reload ioctl on loop4p1-58-verity (254:5) failed: Invalid argument Oct 27 13:23:03.528127 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.544908 (sd-merge)[1811]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 27 13:23:03.545121 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Oct 27 13:23:03.549230 systemd[1]: Finished systemd-confext.service - Merge System Configuration Images into /etc/. Oct 27 13:23:03.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.555419 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Oct 27 13:23:03.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.562876 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Oct 27 13:23:03.582167 kernel: loop4: detected capacity change from 0 to 142648 Oct 27 13:23:03.592525 kernel: loop4: p1 p2 p3 Oct 27 13:23:03.611312 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.611353 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.616166 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.620203 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.620379 systemd-sysext[1823]: device-mapper: reload ioctl on loop4p1-62-verity (254:5) failed: Invalid argument Oct 27 13:23:03.636132 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.654166 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 27 13:23:03.670116 kernel: loop4: detected capacity change from 0 to 364712 Oct 27 13:23:03.679153 kernel: loop4: p1 p2 p3 Oct 27 13:23:03.690882 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.690953 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.695743 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.700462 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.701441 systemd-sysext[1823]: device-mapper: reload ioctl on loop4p1-67-verity (254:5) failed: Invalid argument Oct 27 13:23:03.710149 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.735121 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 27 13:23:03.758119 kernel: loop4: detected capacity change from 0 to 172608 Oct 27 13:23:03.767115 kernel: loop4: p1 p2 p3 Oct 27 13:23:03.786328 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.786399 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.791170 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.794772 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.794941 systemd-sysext[1823]: device-mapper: reload ioctl on loop4p1-72-verity (254:5) failed: Invalid argument Oct 27 13:23:03.806147 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.835138 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 27 13:23:03.872129 kernel: loop4: detected capacity change from 0 to 142648 Oct 27 13:23:03.882119 kernel: loop4: p1 p2 p3 Oct 27 13:23:03.896119 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.896173 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.903539 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.908602 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.910147 (sd-merge)[1849]: device-mapper: reload ioctl on loop4p1-77-verity (254:5) failed: Invalid argument Oct 27 13:23:03.911168 systemd-vconsole-setup[1815]: Configuration of first virtual console was skipped, ignoring remaining ones. Oct 27 13:23:03.916064 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Oct 27 13:23:03.916321 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:03.941119 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Oct 27 13:23:03.941187 kernel: loop5: detected capacity change from 0 to 364712 Oct 27 13:23:03.949116 kernel: loop5: p1 p2 p3 Oct 27 13:23:03.961151 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:03.961207 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:03.966234 kernel: device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:03.970227 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:03.970401 (sd-merge)[1849]: device-mapper: reload ioctl on loop5p1-81-verity (254:6) failed: Invalid argument Oct 27 13:23:03.979158 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:04.006164 kernel: erofs: (device dm-6): mounted with root inode @ nid 39. Oct 27 13:23:04.012118 kernel: loop6: detected capacity change from 0 to 172608 Oct 27 13:23:04.026121 kernel: loop6: p1 p2 p3 Oct 27 13:23:04.037174 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:04.047116 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Oct 27 13:23:04.047173 kernel: device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) Oct 27 13:23:04.050698 kernel: device-mapper: ioctl: error adding target to table Oct 27 13:23:04.051004 (sd-merge)[1849]: device-mapper: reload ioctl on loop6p1-85-verity (254:7) failed: Invalid argument Oct 27 13:23:04.060250 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Oct 27 13:23:04.084117 kernel: erofs: (device dm-7): mounted with root inode @ nid 39. Oct 27 13:23:04.088543 (sd-merge)[1849]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Oct 27 13:23:04.092028 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Oct 27 13:23:04.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:04.099962 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Oct 27 13:23:04.119060 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/base_image_var.conf:29: Duplicate line for path "/var/log/audit", ignoring. Oct 27 13:23:04.120270 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/base_image_var_late.conf:44: Duplicate line for path "/var/log/audit", ignoring. Oct 27 13:23:04.120452 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/baselayout.conf:15: Duplicate line for path "/var", ignoring. Oct 27 13:23:04.120460 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/baselayout.conf:16: Duplicate line for path "/var/empty", ignoring. Oct 27 13:23:04.120470 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/baselayout.conf:21: Duplicate line for path "/var/log", ignoring. Oct 27 13:23:04.120551 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/dbus.conf:5: Duplicate line for path "/var/lib/dbus", ignoring. Oct 27 13:23:04.120755 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/nfs-utils.conf:2: Duplicate line for path "/var/lib/nfs/v4recovery", ignoring. Oct 27 13:23:04.151606 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Oct 27 13:23:04.151630 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Oct 27 13:23:04.151829 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 27 13:23:04.152538 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Duplicate line for path "/var/lib/tpm2-tss/system/keystore", ignoring. Oct 27 13:23:04.152549 systemd-tmpfiles[1873]: ACLs are not supported, ignoring. Oct 27 13:23:04.152581 systemd-tmpfiles[1873]: ACLs are not supported, ignoring. Oct 27 13:23:04.153657 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/var.conf:10: Duplicate line for path "/var", ignoring. Oct 27 13:23:04.153674 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Oct 27 13:23:04.153723 systemd-tmpfiles[1873]: /usr/lib/tmpfiles.d/var.conf:21: Duplicate line for path "/var/lib", ignoring. Oct 27 13:23:04.156653 systemd-tmpfiles[1873]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Oct 27 13:23:04.156664 systemd-tmpfiles[1873]: Skipping /boot Oct 27 13:23:04.162267 systemd-tmpfiles[1873]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Oct 27 13:23:04.162279 systemd-tmpfiles[1873]: Skipping /boot Oct 27 13:23:04.172254 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Oct 27 13:23:04.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:04.180899 systemd[1]: Starting audit-rules.service - Load Audit Rules... Oct 27 13:23:04.193370 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Oct 27 13:23:04.202229 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Oct 27 13:23:04.210431 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Oct 27 13:23:04.217169 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Oct 27 13:23:04.226000 audit[1879]: AUDIT1127 pid=1879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 27 13:23:04.232144 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Oct 27 13:23:04.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:04.305435 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Oct 27 13:23:04.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:04.404000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 27 13:23:04.405473 augenrules[1903]: No rules Oct 27 13:23:04.408567 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 27 13:23:04.408613 kernel: audit: type=1305 audit(1793107384.404:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 27 13:23:04.417444 systemd[1]: audit-rules.service: Deactivated successfully. Oct 27 13:23:04.404000 audit[1903]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff161b8b0 a2=420 a3=0 items=0 ppid=1875 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:04.417728 systemd[1]: Finished audit-rules.service - Load Audit Rules. Oct 27 13:23:04.439751 kernel: audit: type=1300 audit(1793107384.404:168): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff161b8b0 a2=420 a3=0 items=0 ppid=1875 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:04.404000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 27 13:23:04.448770 kernel: audit: type=1327 audit(1793107384.404:168): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 27 13:23:04.590877 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Oct 27 13:23:04.596517 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt skipped, unmet condition check ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt Oct 27 13:23:05.083266 systemd-networkd[1681]: eth0: Gained IPv6LL Oct 27 13:23:05.085549 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Online. Oct 27 13:23:05.091361 systemd[1]: Reached target network-online.target - Network is Online. Oct 27 13:23:11.531853 ldconfig[1877]: ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 27 13:23:11.541449 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Oct 27 13:23:11.548083 systemd[1]: Starting systemd-update-done.service - Update is Completed... Oct 27 13:23:11.570237 systemd[1]: Finished systemd-update-done.service - Update is Completed. Oct 27 13:23:11.575074 systemd[1]: Reached target sysinit.target - System Initialization. Oct 27 13:23:11.579294 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Oct 27 13:23:11.584489 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Oct 27 13:23:11.589704 systemd[1]: Started logrotate.timer - Daily rotation of log files. Oct 27 13:23:11.593999 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Oct 27 13:23:11.599204 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Oct 27 13:23:11.604676 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Oct 27 13:23:11.609261 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Oct 27 13:23:11.614463 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer skipped, unmet condition check ConditionPathExists=/usr/.noupdate Oct 27 13:23:11.614498 systemd[1]: Reached target paths.target - Path Units. Oct 27 13:23:11.618023 systemd[1]: Reached target timers.target - Timer Units. Oct 27 13:23:11.623065 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Oct 27 13:23:11.629666 systemd[1]: Starting docker.socket - Docker Socket for the API... Oct 27 13:23:11.634954 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Oct 27 13:23:11.643399 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Oct 27 13:23:11.647756 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Oct 27 13:23:11.668750 systemd[1]: Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket. Oct 27 13:23:11.674120 systemd[1]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Oct 27 13:23:11.680168 systemd[1]: Listening on docker.socket - Docker Socket for the API. Oct 27 13:23:11.684393 systemd[1]: Reached target sockets.target - Socket Units. Oct 27 13:23:11.688014 systemd[1]: Reached target basic.target - Basic System. Oct 27 13:23:11.691593 systemd[1]: addon-config@oem.service - Configure Addon /oem skipped, no trigger condition checks were met. Oct 27 13:23:11.691618 systemd[1]: addon-run@oem.service - Run Addon /oem skipped, no trigger condition checks were met. Oct 27 13:23:11.693363 systemd[1]: Starting chronyd.service - NTP client/server... Oct 27 13:23:11.711005 systemd[1]: Starting containerd.service - containerd container runtime... Oct 27 13:23:11.717245 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Oct 27 13:23:11.722919 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Oct 27 13:23:11.734366 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Oct 27 13:23:11.738408 chronyd[1917]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG) Oct 27 13:23:11.739655 chronyd[1917]: Timezone right/UTC failed leap second check, ignoring Oct 27 13:23:11.739781 chronyd[1917]: Loaded seccomp filter (level 2) Oct 27 13:23:11.740849 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Oct 27 13:23:11.745439 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS skipped, unmet condition check ConditionPathExists=/oem/bin/flatcar-setup-environment Oct 27 13:23:11.748279 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon. Oct 27 13:23:11.752426 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon skipped, unmet condition check ConditionPathExists=/dev/vmbus/hv_vss Oct 27 13:23:11.753296 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Oct 27 13:23:11.761012 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Oct 27 13:23:11.767713 jq[1921]: false Oct 27 13:23:11.767663 KVP[1923]: KVP starting; pid is:1923 Oct 27 13:23:11.768870 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Oct 27 13:23:11.774877 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Oct 27 13:23:11.780948 KVP[1923]: KVP LIC Version: 3.1 Oct 27 13:23:11.782831 kernel: hv_utils: KVP IC version 4.0 Oct 27 13:23:11.783468 systemd[1]: Starting systemd-logind.service - User Login Management... Oct 27 13:23:11.788968 systemd[1]: tcsd.service - TCG Core Services Daemon skipped, unmet condition check ConditionPathExists=/dev/tpm0 Oct 27 13:23:11.790314 systemd[1]: Starting update-engine.service - Update Engine... Oct 27 13:23:11.800513 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Oct 27 13:23:11.806788 extend-filesystems[1922]: Found /dev/sda6 Oct 27 13:23:11.809000 systemd[1]: Started chronyd.service - NTP client/server. Oct 27 13:23:11.818342 motdgen[1946]: /oem/oem-release: line 2: Azure: command not found Oct 27 13:23:11.822298 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Oct 27 13:23:11.828111 jq[1936]: true Oct 27 13:23:11.830707 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 27 13:23:11.831116 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Oct 27 13:23:11.831324 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 27 13:23:11.831700 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Oct 27 13:23:11.837898 extend-filesystems[1922]: Found /dev/sda9 Oct 27 13:23:11.841487 systemd[1]: motdgen.service: Deactivated successfully. Oct 27 13:23:11.842504 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Oct 27 13:23:11.846199 update_engine[1934]: I20261027 13:23:11.845139 1934 main.cc:92] Flatcar Update Engine starting Oct 27 13:23:11.853232 extend-filesystems[1922]: Checking size of /dev/sda9 Oct 27 13:23:11.860319 jq[1956]: true Oct 27 13:23:11.872329 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Oct 27 13:23:11.887523 extend-filesystems[1922]: Resized partition /dev/sda9 Oct 27 13:23:11.909564 extend-filesystems[1981]: resize2fs 1.47.4 (6-Mar-2025) Oct 27 13:23:11.924480 kernel: EXT4-fs (sda9): resizing filesystem from 6359552 to 6376955 blocks Oct 27 13:23:11.924546 kernel: EXT4-fs (sda9): resized filesystem to 6376955 Oct 27 13:23:11.931878 systemd-logind[1931]: New seat seat0. Oct 27 13:23:11.941396 systemd-logind[1931]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 27 13:23:11.941709 systemd[1]: Started systemd-logind.service - User Login Management. Oct 27 13:23:11.960349 extend-filesystems[1981]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Oct 27 13:23:11.960349 extend-filesystems[1981]: old_desc_blocks = 4, new_desc_blocks = 4 Oct 27 13:23:11.960349 extend-filesystems[1981]: The filesystem on /dev/sda9 is now 6376955 (4k) blocks long. Oct 27 13:23:12.016325 extend-filesystems[1922]: Resized filesystem in /dev/sda9 Oct 27 13:23:12.026810 bash[1994]: Updated "/home/core/.ssh/authorized_keys" Oct 27 13:23:11.966067 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 27 13:23:11.967066 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Oct 27 13:23:11.984738 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Oct 27 13:23:12.002429 systemd[1]: sshkeys.service skipped, no trigger condition checks were met. Oct 27 13:23:12.052010 dbus-daemon[1919]: [system] SELinux support is enabled Oct 27 13:23:12.052242 systemd[1]: Started dbus.service - D-Bus System Message Bus. Oct 27 13:23:12.058670 systemd[1]: system-cloudinit@usr-share-coreos-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/coreos/cloud-config.yml skipped, unmet condition check ConditionFileNotEmpty=/usr/share/coreos/cloud-config.yml Oct 27 13:23:12.058699 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Oct 27 13:23:12.067023 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline skipped, unmet condition check ConditionKernelCommandLine=cloud-config-url Oct 27 13:23:12.069509 update_engine[1934]: I20261027 13:23:12.069283 1934 update_check_scheduler.cc:74] Next update check in 9m17s Oct 27 13:23:12.067046 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Oct 27 13:23:12.078432 systemd[1]: Started update-engine.service - Update Engine. Oct 27 13:23:12.082936 dbus-daemon[1919]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 27 13:23:12.086335 systemd[1]: Started locksmithd.service - Cluster reboot manager. Oct 27 13:23:12.142678 sshd_keygen[1941]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 MLDSA44-ED25519 Oct 27 13:23:12.161722 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Oct 27 13:23:12.170861 systemd[1]: Starting issuegen.service - Generate /run/issue... Oct 27 13:23:12.181690 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent... Oct 27 13:23:12.187824 systemd[1]: issuegen.service: Deactivated successfully. Oct 27 13:23:12.188197 systemd[1]: Finished issuegen.service - Generate /run/issue. Oct 27 13:23:12.199330 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Oct 27 13:23:12.214133 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent. Oct 27 13:23:12.224260 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Oct 27 13:23:12.231608 systemd[1]: Started getty@tty1.service - Getty on tty1. Oct 27 13:23:12.236668 systemd[1]: Started serial-getty@ttyAMA0.service - Serial Getty on ttyAMA0. Oct 27 13:23:12.241615 systemd[1]: Reached target getty.target - Login Prompts. Oct 27 13:23:12.410552 locksmithd[2060]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 27 13:23:15.896218 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Oct 27 13:23:15.901885 systemd[1]: Started sshd@0-1-10.0.0.24:22-109.160.32.131:59284.service - OpenSSH per-connection server daemon (109.160.32.131:59284). Oct 27 13:23:16.711637 waagent[2094]: 2026-10-27T13:23:16.707345Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4 Oct 27 13:23:16.712295 waagent[2094]: 2026-10-27T13:23:16.712258Z INFO Daemon Daemon OS: flatcar 4757.2.3 Oct 27 13:23:16.716120 waagent[2094]: 2026-10-27T13:23:16.716076Z INFO Daemon Daemon Python: 3.12.13 Oct 27 13:23:16.719820 waagent[2094]: 2026-10-27T13:23:16.719782Z INFO Daemon Daemon Run daemon Oct 27 13:23:16.723515 waagent[2094]: 2026-10-27T13:23:16.723484Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4757.2.3' Oct 27 13:23:16.730222 waagent[2094]: 2026-10-27T13:23:16.730190Z INFO Daemon Daemon Using waagent for provisioning Oct 27 13:23:16.734895 waagent[2094]: 2026-10-27T13:23:16.734865Z INFO Daemon Daemon Activate resource disk Oct 27 13:23:16.738606 waagent[2094]: 2026-10-27T13:23:16.738577Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 27 13:23:16.747233 waagent[2094]: 2026-10-27T13:23:16.747199Z INFO Daemon Daemon Found device: None Oct 27 13:23:16.750727 waagent[2094]: 2026-10-27T13:23:16.750698Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 27 13:23:16.757008 waagent[2094]: 2026-10-27T13:23:16.756977Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 27 13:23:16.766479 waagent[2094]: 2026-10-27T13:23:16.766443Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 27 13:23:16.770883 waagent[2094]: 2026-10-27T13:23:16.770851Z INFO Daemon Daemon Running default provisioning handler Oct 27 13:23:16.779250 waagent[2094]: 2026-10-27T13:23:16.779219Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4. Oct 27 13:23:16.789030 waagent[2094]: 2026-10-27T13:23:16.788999Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 27 13:23:16.796307 waagent[2094]: 2026-10-27T13:23:16.796278Z INFO Daemon Daemon cloud-init is enabled: False Oct 27 13:23:16.800134 waagent[2094]: 2026-10-27T13:23:16.800094Z INFO Daemon Daemon Copying ovf-env.xml Oct 27 13:23:16.944381 waagent[2094]: 2026-10-27T13:23:16.944310Z INFO Daemon Daemon Successfully mounted dvd Oct 27 13:23:17.097029 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 27 13:23:17.099502 waagent[2094]: 2026-10-27T13:23:17.098837Z INFO Daemon Daemon Detect protocol endpoint Oct 27 13:23:17.103432 waagent[2094]: 2026-10-27T13:23:17.103387Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 27 13:23:17.107831 waagent[2094]: 2026-10-27T13:23:17.107796Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 27 13:23:17.112880 waagent[2094]: 2026-10-27T13:23:17.112846Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 27 13:23:17.117290 waagent[2094]: 2026-10-27T13:23:17.117249Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 27 13:23:17.121164 waagent[2094]: 2026-10-27T13:23:17.121129Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 27 13:23:17.147772 waagent[2094]: 2026-10-27T13:23:17.147731Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 27 13:23:17.152760 waagent[2094]: 2026-10-27T13:23:17.152733Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 27 13:23:17.156654 waagent[2094]: 2026-10-27T13:23:17.156622Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 27 13:23:17.350066 sshd[2112]: Connection closed by authenticating user root 109.160.32.131 port 59284 [preauth] Oct 27 13:23:17.367136 waagent[2094]: 2026-10-27T13:23:17.366596Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 27 13:23:17.371518 waagent[2094]: 2026-10-27T13:23:17.371474Z INFO Daemon Daemon Forcing an update of the goal state. Oct 27 13:23:17.380990 waagent[2094]: 2026-10-27T13:23:17.380950Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 27 13:23:17.398011 waagent[2094]: 2026-10-27T13:23:17.397966Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.189 Oct 27 13:23:17.403076 systemd[1]: sshd@0-1-10.0.0.24:22-109.160.32.131:59284.service: Deactivated successfully. Oct 27 13:23:17.404902 waagent[2094]: 2026-10-27T13:23:17.402855Z INFO Daemon Oct 27 13:23:17.405208 waagent[2094]: 2026-10-27T13:23:17.404924Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 8587ce13-6c61-48e8-aa58-328456a8b431 eTag: 17751796626569538423 source: Fabric] Oct 27 13:23:17.413785 waagent[2094]: 2026-10-27T13:23:17.413747Z INFO Daemon The vmSettings originated via Fabric; will ignore them. Oct 27 13:23:17.418891 waagent[2094]: 2026-10-27T13:23:17.418851Z INFO Daemon Oct 27 13:23:17.420953 waagent[2094]: 2026-10-27T13:23:17.420925Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1] Oct 27 13:23:17.428503 waagent[2094]: 2026-10-27T13:23:17.428471Z INFO Daemon Daemon Downloading artifacts profile blob Oct 27 13:23:17.507286 waagent[2094]: 2026-10-27T13:23:17.507230Z INFO Daemon Downloaded certificate {'thumbprint': '3823663E5A3A575C97D977E74EFEBA13EDF23FD7', 'hasPrivateKey': True} Oct 27 13:23:17.514677 waagent[2094]: 2026-10-27T13:23:17.514640Z INFO Daemon Fetch goal state completed Oct 27 13:23:17.523324 waagent[2094]: 2026-10-27T13:23:17.523293Z INFO Daemon Daemon Starting provisioning Oct 27 13:23:17.527064 waagent[2094]: 2026-10-27T13:23:17.527032Z INFO Daemon Daemon Handle ovf-env.xml. Oct 27 13:23:17.530755 waagent[2094]: 2026-10-27T13:23:17.530728Z INFO Daemon Daemon Set hostname [ci-4757.2.3-a-7b169ef668] Oct 27 13:23:17.541325 waagent[2094]: 2026-10-27T13:23:17.536520Z INFO Daemon Daemon Publish hostname [ci-4757.2.3-a-7b169ef668] Oct 27 13:23:17.541752 waagent[2094]: 2026-10-27T13:23:17.541714Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 27 13:23:17.546830 waagent[2094]: 2026-10-27T13:23:17.546788Z INFO Daemon Daemon Primary interface is [eth0] Oct 27 13:23:17.556016 systemd-networkd[1681]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Oct 27 13:23:17.556290 systemd-networkd[1681]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network. Oct 27 13:23:17.556396 systemd-networkd[1681]: eth0: DHCP lease lost Oct 27 13:23:17.566114 waagent[2094]: 2026-10-27T13:23:17.566059Z INFO Daemon Daemon Create user account if not exists Oct 27 13:23:17.570984 waagent[2094]: 2026-10-27T13:23:17.570947Z INFO Daemon Daemon User core already exists, skip useradd Oct 27 13:23:17.575501 waagent[2094]: 2026-10-27T13:23:17.575464Z INFO Daemon Daemon Configure sudoer Oct 27 13:23:17.579497 waagent[2094]: 2026-10-27T13:23:17.579459Z INFO Daemon Daemon Configure sshd Oct 27 13:23:17.583301 systemd-networkd[1681]: eth0: DHCPv4 address 10.0.0.24/24, gateway 10.0.0.1 acquired from 168.63.129.16 Oct 27 13:23:17.584437 waagent[2094]: 2026-10-27T13:23:17.584401Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive. Oct 27 13:23:17.596635 waagent[2094]: 2026-10-27T13:23:17.596596Z INFO Daemon Daemon Deploy ssh public key. Oct 27 13:23:17.742288 login[2096]: pam_unix(login:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:17.742755 login[2097]: pam_unix(login:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:17.750261 systemd-logind[1931]: New session '1' of user 'core' with class 'user-light' and type 'tty'. Oct 27 13:23:17.751776 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Oct 27 13:23:17.752788 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Oct 27 13:23:17.756244 systemd-logind[1931]: New session '2' of user 'core' with class 'user-light' and type 'tty'. Oct 27 13:23:17.787296 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Oct 27 13:23:17.792708 systemd[1]: Started session-1.scope - Session 1 of User core. Oct 27 13:23:17.793309 systemd[1]: Started session-2.scope - Session 2 of User core. Oct 27 13:23:18.521176 containerd[1962]: time="2026-10-27T13:23:18Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Oct 27 13:23:18.521949 containerd[1962]: time="2026-10-27T13:23:18.521917924Z" level=info msg="starting containerd" revision=e53c7c1516c3b2bff98eb76f1f4117477e6f4e66 version=v2.2.5 Oct 27 13:23:18.531261 containerd[1962]: time="2026-10-27T13:23:18.531223452Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="7.448µs" Oct 27 13:23:18.531261 containerd[1962]: time="2026-10-27T13:23:18.531255284Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Oct 27 13:23:18.531351 containerd[1962]: time="2026-10-27T13:23:18.531288820Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Oct 27 13:23:18.531351 containerd[1962]: time="2026-10-27T13:23:18.531298724Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Oct 27 13:23:18.531486 containerd[1962]: time="2026-10-27T13:23:18.531465332Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Oct 27 13:23:18.531504 containerd[1962]: time="2026-10-27T13:23:18.531486492Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 Oct 27 13:23:18.531504 containerd[1962]: time="2026-10-27T13:23:18.531495156Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531555 containerd[1962]: time="2026-10-27T13:23:18.531541588Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531555 containerd[1962]: time="2026-10-27T13:23:18.531551820Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531734 containerd[1962]: time="2026-10-27T13:23:18.531717564Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531734 containerd[1962]: time="2026-10-27T13:23:18.531732892Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531758 containerd[1962]: time="2026-10-27T13:23:18.531741332Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531758 containerd[1962]: time="2026-10-27T13:23:18.531747644Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531918 containerd[1962]: time="2026-10-27T13:23:18.531903284Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Oct 27 13:23:18.531973 containerd[1962]: time="2026-10-27T13:23:18.531962140Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.532133 containerd[1962]: time="2026-10-27T13:23:18.532119108Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.532155 containerd[1962]: time="2026-10-27T13:23:18.532143932Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Oct 27 13:23:18.532170 containerd[1962]: time="2026-10-27T13:23:18.532153348Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Oct 27 13:23:18.532170 containerd[1962]: time="2026-10-27T13:23:18.532168028Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Oct 27 13:23:18.566823 containerd[1962]: time="2026-10-27T13:23:18.566785756Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Oct 27 13:23:18.566908 containerd[1962]: time="2026-10-27T13:23:18.566901372Z" level=info msg="metadata content store policy set" policy=shared Oct 27 13:23:18.580451 containerd[1962]: time="2026-10-27T13:23:18.580416436Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Oct 27 13:23:18.580497 containerd[1962]: time="2026-10-27T13:23:18.580469900Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Oct 27 13:23:18.580850 containerd[1962]: time="2026-10-27T13:23:18.580830868Z" level=info msg="built-in NRI default validator is disabled" Oct 27 13:23:18.580850 containerd[1962]: time="2026-10-27T13:23:18.580846972Z" level=info msg="runtime interface created" Oct 27 13:23:18.580850 containerd[1962]: time="2026-10-27T13:23:18.580851476Z" level=info msg="created NRI interface" Oct 27 13:23:18.580928 containerd[1962]: time="2026-10-27T13:23:18.580861732Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Oct 27 13:23:18.616522 containerd[1962]: time="2026-10-27T13:23:18.616477468Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 Oct 27 13:23:18.616681 containerd[1962]: time="2026-10-27T13:23:18.616657876Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Oct 27 13:23:18.616720 containerd[1962]: time="2026-10-27T13:23:18.616685588Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Oct 27 13:23:18.616720 containerd[1962]: time="2026-10-27T13:23:18.616698276Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Oct 27 13:23:18.616720 containerd[1962]: time="2026-10-27T13:23:18.616710028Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Oct 27 13:23:18.616720 containerd[1962]: time="2026-10-27T13:23:18.616716260Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616723892Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616732388Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616740340Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616747092Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616753572Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Oct 27 13:23:18.616780 containerd[1962]: time="2026-10-27T13:23:18.616760708Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Oct 27 13:23:18.616904 containerd[1962]: time="2026-10-27T13:23:18.616886684Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Oct 27 13:23:18.616921 containerd[1962]: time="2026-10-27T13:23:18.616908276Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Oct 27 13:23:18.616921 containerd[1962]: time="2026-10-27T13:23:18.616917172Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Oct 27 13:23:18.616948 containerd[1962]: time="2026-10-27T13:23:18.616925076Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Oct 27 13:23:18.616948 containerd[1962]: time="2026-10-27T13:23:18.616933268Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Oct 27 13:23:18.616948 containerd[1962]: time="2026-10-27T13:23:18.616940876Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Oct 27 13:23:18.616979 containerd[1962]: time="2026-10-27T13:23:18.616948284Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Oct 27 13:23:18.616979 containerd[1962]: time="2026-10-27T13:23:18.616955236Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Oct 27 13:23:18.616979 containerd[1962]: time="2026-10-27T13:23:18.616962084Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 Oct 27 13:23:18.616979 containerd[1962]: time="2026-10-27T13:23:18.616968428Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Oct 27 13:23:18.616979 containerd[1962]: time="2026-10-27T13:23:18.616976412Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Oct 27 13:23:18.617035 containerd[1962]: time="2026-10-27T13:23:18.616982220Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Oct 27 13:23:18.617035 containerd[1962]: time="2026-10-27T13:23:18.617004636Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Oct 27 13:23:18.634213 containerd[1962]: time="2026-10-27T13:23:18.634185132Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Oct 27 13:23:18.634249 containerd[1962]: time="2026-10-27T13:23:18.634221692Z" level=info msg="Start snapshots syncer" Oct 27 13:23:18.634249 containerd[1962]: time="2026-10-27T13:23:18.634239468Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Oct 27 13:23:18.634541 containerd[1962]: time="2026-10-27T13:23:18.634503780Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Oct 27 13:23:18.634649 containerd[1962]: time="2026-10-27T13:23:18.634556300Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Oct 27 13:23:18.634649 containerd[1962]: time="2026-10-27T13:23:18.634597324Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Oct 27 13:23:18.634735 containerd[1962]: time="2026-10-27T13:23:18.634716124Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Oct 27 13:23:18.634753 containerd[1962]: time="2026-10-27T13:23:18.634737212Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Oct 27 13:23:18.634753 containerd[1962]: time="2026-10-27T13:23:18.634747364Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Oct 27 13:23:18.634781 containerd[1962]: time="2026-10-27T13:23:18.634753948Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Oct 27 13:23:18.634781 containerd[1962]: time="2026-10-27T13:23:18.634761860Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Oct 27 13:23:18.634781 containerd[1962]: time="2026-10-27T13:23:18.634768148Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Oct 27 13:23:18.634781 containerd[1962]: time="2026-10-27T13:23:18.634775084Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Oct 27 13:23:18.634829 containerd[1962]: time="2026-10-27T13:23:18.634783420Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Oct 27 13:23:18.634829 containerd[1962]: time="2026-10-27T13:23:18.634790084Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Oct 27 13:23:18.634829 containerd[1962]: time="2026-10-27T13:23:18.634827372Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Oct 27 13:23:18.634866 containerd[1962]: time="2026-10-27T13:23:18.634839588Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Oct 27 13:23:18.634866 containerd[1962]: time="2026-10-27T13:23:18.634845188Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Oct 27 13:23:18.634866 containerd[1962]: time="2026-10-27T13:23:18.634850852Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Oct 27 13:23:18.634866 containerd[1962]: time="2026-10-27T13:23:18.634855388Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Oct 27 13:23:18.634866 containerd[1962]: time="2026-10-27T13:23:18.634861204Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Oct 27 13:23:18.634917 containerd[1962]: time="2026-10-27T13:23:18.634868684Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Oct 27 13:23:18.634917 containerd[1962]: time="2026-10-27T13:23:18.634877004Z" level=info msg="Connect containerd service" Oct 27 13:23:18.634917 containerd[1962]: time="2026-10-27T13:23:18.634892996Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Oct 27 13:23:18.636014 containerd[1962]: time="2026-10-27T13:23:18.635989588Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 27 13:23:18.757869 waagent[2094]: 2026-10-27T13:23:18.757822Z INFO Daemon Daemon Provisioning complete Oct 27 13:23:18.767847 waagent[2094]: 2026-10-27T13:23:18.767807Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 27 13:23:18.772888 waagent[2094]: 2026-10-27T13:23:18.772816Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 27 13:23:18.780683 waagent[2094]: 2026-10-27T13:23:18.780620Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent Oct 27 13:23:18.885918 waagent[2181]: 2026-10-27T13:23:18.885453Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4) Oct 27 13:23:18.885918 waagent[2181]: 2026-10-27T13:23:18.885589Z INFO ExtHandler ExtHandler OS: flatcar 4757.2.3 Oct 27 13:23:18.885918 waagent[2181]: 2026-10-27T13:23:18.885633Z INFO ExtHandler ExtHandler Python: 3.12.13 Oct 27 13:23:18.885918 waagent[2181]: 2026-10-27T13:23:18.885667Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Oct 27 13:23:18.923381 waagent[2181]: 2026-10-27T13:23:18.923323Z INFO ExtHandler ExtHandler Distro: flatcar-4757.2.3; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.13; Arch: aarch64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0; Oct 27 13:23:18.923677 waagent[2181]: 2026-10-27T13:23:18.923650Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 27 13:23:18.923830 waagent[2181]: 2026-10-27T13:23:18.923805Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 27 13:23:18.929463 waagent[2181]: 2026-10-27T13:23:18.929417Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.939701Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.189 Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.940144Z INFO ExtHandler Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.940216Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: cea135d5-93bc-456c-8da6-33caf30a568c eTag: 17751796626569538423 source: Fabric] Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.940420Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.940814Z INFO ExtHandler Oct 27 13:23:18.941115 waagent[2181]: 2026-10-27T13:23:18.940858Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 27 13:23:18.947566 waagent[2181]: 2026-10-27T13:23:18.947537Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 27 13:23:18.999219 waagent[2181]: 2026-10-27T13:23:18.999159Z INFO ExtHandler Downloaded certificate {'thumbprint': '3823663E5A3A575C97D977E74EFEBA13EDF23FD7', 'hasPrivateKey': True} Oct 27 13:23:18.999578 waagent[2181]: 2026-10-27T13:23:18.999542Z INFO ExtHandler Fetch goal state completed Oct 27 13:23:19.008298 waagent[2181]: 2026-10-27T13:23:19.008248Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.9 29 Sep 2026 (Library: OpenSSL 3.5.9 29 Sep 2026) Oct 27 13:23:19.011383 waagent[2181]: 2026-10-27T13:23:19.011338Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2181 Oct 27 13:23:19.011493 waagent[2181]: 2026-10-27T13:23:19.011465Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ******** Oct 27 13:23:19.011745 waagent[2181]: 2026-10-27T13:23:19.011713Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ******** Oct 27 13:23:19.012837 waagent[2181]: 2026-10-27T13:23:19.012801Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4757.2.3', '', 'Flatcar Container Linux by Kinvolk'] Oct 27 13:23:19.013188 waagent[2181]: 2026-10-27T13:23:19.013156Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4757.2.3', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Oct 27 13:23:19.013290 waagent[2181]: 2026-10-27T13:23:19.013267Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Oct 27 13:23:19.013716 waagent[2181]: 2026-10-27T13:23:19.013685Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 27 13:23:19.048583 waagent[2181]: 2026-10-27T13:23:19.048493Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 27 13:23:19.048705 waagent[2181]: 2026-10-27T13:23:19.048673Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 27 13:23:19.052850 waagent[2181]: 2026-10-27T13:23:19.052825Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 27 13:23:19.057838 systemd[1]: Reload requested from client PID 2196 ('systemctl') (unit waagent.service)... Oct 27 13:23:19.057854 systemd[1]: Reloading... Oct 27 13:23:19.132148 zram_generator::config[2247]: No configuration found. Oct 27 13:23:19.359741 systemd[1]: Reloading finished in 301 ms. Oct 27 13:23:19.384117 waagent[2181]: 2026-10-27T13:23:19.382855Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service Oct 27 13:23:19.384117 waagent[2181]: 2026-10-27T13:23:19.382996Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully Oct 27 13:23:19.734497 waagent[2181]: 2026-10-27T13:23:19.734376Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 27 13:23:19.734875 waagent[2181]: 2026-10-27T13:23:19.734839Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Oct 27 13:23:19.735621 waagent[2181]: 2026-10-27T13:23:19.735582Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 27 13:23:19.735732 waagent[2181]: 2026-10-27T13:23:19.735694Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 27 13:23:19.735885 waagent[2181]: 2026-10-27T13:23:19.735858Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 27 13:23:19.736089 waagent[2181]: 2026-10-27T13:23:19.736058Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 27 13:23:19.736400 waagent[2181]: 2026-10-27T13:23:19.736365Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 27 13:23:19.736544 waagent[2181]: 2026-10-27T13:23:19.736511Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 27 13:23:19.736544 waagent[2181]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 27 13:23:19.736544 waagent[2181]: eth0 00000000 0100000A 0003 0 0 1024 00000000 0 0 0 Oct 27 13:23:19.736544 waagent[2181]: eth0 0000000A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 27 13:23:19.736544 waagent[2181]: eth0 0100000A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 27 13:23:19.736544 waagent[2181]: eth0 10813FA8 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 27 13:23:19.736544 waagent[2181]: eth0 FEA9FEA9 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 27 13:23:19.736972 waagent[2181]: 2026-10-27T13:23:19.736948Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 27 13:23:19.737022 waagent[2181]: 2026-10-27T13:23:19.736917Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 27 13:23:19.737081 waagent[2181]: 2026-10-27T13:23:19.737038Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 27 13:23:19.737159 waagent[2181]: 2026-10-27T13:23:19.737135Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 27 13:23:19.737285 waagent[2181]: 2026-10-27T13:23:19.737252Z INFO EnvHandler ExtHandler Configure routes Oct 27 13:23:19.737586 waagent[2181]: 2026-10-27T13:23:19.737546Z INFO EnvHandler ExtHandler Gateway:None Oct 27 13:23:19.737635 waagent[2181]: 2026-10-27T13:23:19.737616Z INFO EnvHandler ExtHandler Routes:None Oct 27 13:23:19.737963 waagent[2181]: 2026-10-27T13:23:19.737931Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 27 13:23:19.738052 waagent[2181]: 2026-10-27T13:23:19.738013Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 27 13:23:19.738117 waagent[2181]: 2026-10-27T13:23:19.738071Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 27 13:23:19.742574 waagent[2181]: 2026-10-27T13:23:19.742541Z INFO ExtHandler ExtHandler Oct 27 13:23:19.742864 waagent[2181]: 2026-10-27T13:23:19.742835Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: c8ffed48-3832-4f2d-a9e3-b00c069385c9 correlation 2665c4f9-f565-4c5f-9be4-308d4a4b7311 created: 2026-10-27T13:21:48.976204Z] Oct 27 13:23:19.743672 waagent[2181]: 2026-10-27T13:23:19.743637Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 27 13:23:19.744891 waagent[2181]: 2026-10-27T13:23:19.744859Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] Oct 27 13:23:19.770609 waagent[2181]: 2026-10-27T13:23:19.770523Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: C504E095-6113-4FEE-9F07-5BCC9BF25324;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;] Oct 27 13:23:19.815510 waagent[2181]: 2026-10-27T13:23:19.815447Z INFO MonitorHandler ExtHandler Network interfaces: Oct 27 13:23:19.815510 waagent[2181]: Executing ['ip', '-a', '-o', 'link']: Oct 27 13:23:19.815510 waagent[2181]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 27 13:23:19.815510 waagent[2181]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:c0:aa:2e brd ff:ff:ff:ff:ff:ff\ altname enx002248c0aa2e Oct 27 13:23:19.815510 waagent[2181]: 3: enP19894s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:c0:aa:2e brd ff:ff:ff:ff:ff:ff\ altname enP19894p0s2 Oct 27 13:23:19.815510 waagent[2181]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 27 13:23:19.815510 waagent[2181]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 27 13:23:19.815510 waagent[2181]: 2: eth0 inet 10.0.0.24/24 metric 1024 brd 10.0.0.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 27 13:23:19.815510 waagent[2181]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 27 13:23:19.815510 waagent[2181]: 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever Oct 27 13:23:19.815510 waagent[2181]: 2: eth0 inet6 fe80::222:48ff:fec0:aa2e/64 scope link proto kernel_ll \ valid_lft forever preferred_lft forever Oct 27 13:23:19.871128 waagent[2181]: 2026-10-27T13:23:19.870677Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Oct 27 13:23:19.871128 waagent[2181]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.871128 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.871128 waagent[2181]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.871128 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.871128 waagent[2181]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.871128 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.871128 waagent[2181]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 27 13:23:19.871128 waagent[2181]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 27 13:23:19.871128 waagent[2181]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 27 13:23:19.873085 waagent[2181]: 2026-10-27T13:23:19.873039Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 27 13:23:19.873085 waagent[2181]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.873085 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.873085 waagent[2181]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.873085 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.873085 waagent[2181]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 27 13:23:19.873085 waagent[2181]: pkts bytes target prot opt in out source destination Oct 27 13:23:19.873085 waagent[2181]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 27 13:23:19.873085 waagent[2181]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 27 13:23:19.873085 waagent[2181]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 27 13:23:19.873315 waagent[2181]: 2026-10-27T13:23:19.873289Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960402996Z" level=info msg="Start subscribing containerd event" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960464084Z" level=info msg="Start recovering state" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960551068Z" level=info msg="Start event monitor" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960561692Z" level=info msg="Start cni network conf syncer for default" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960566724Z" level=info msg="Start streaming server" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960574092Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960579292Z" level=info msg="runtime interface starting up..." Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960582508Z" level=info msg="starting plugins..." Oct 27 13:23:20.960658 containerd[1962]: time="2026-10-27T13:23:20.960594052Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Oct 27 13:23:20.979003 containerd[1962]: time="2026-10-27T13:23:20.978141692Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 27 13:23:20.979003 containerd[1962]: time="2026-10-27T13:23:20.978199436Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 27 13:23:20.994123 containerd[1962]: time="2026-10-27T13:23:20.993505916Z" level=info msg="containerd successfully booted in 2.473534s" Oct 27 13:23:20.993725 systemd[1]: Started containerd.service - containerd container runtime. Oct 27 13:23:21.001677 systemd[1]: Reached target multi-user.target - Multi-User System. Oct 27 13:23:21.007634 systemd[1]: Startup finished in 2.755s (kernel) + 14.505s (initrd) + 37.925s (userspace) = 55.187s. Oct 27 13:23:21.888205 systemd[1]: Started sshd@1-4097-10.0.0.24:22-109.160.32.131:42012.service - OpenSSH per-connection server daemon (109.160.32.131:42012). Oct 27 13:23:23.081486 sshd[2344]: Connection closed by authenticating user root 109.160.32.131 port 42012 [preauth] Oct 27 13:23:23.083438 systemd[1]: sshd@1-4097-10.0.0.24:22-109.160.32.131:42012.service: Deactivated successfully. Oct 27 13:23:27.365290 systemd[1]: Started sshd@2-4098-10.0.0.24:22-109.160.32.131:42036.service - OpenSSH per-connection server daemon (109.160.32.131:42036). Oct 27 13:23:28.280592 sshd[2350]: Invalid user user from 109.160.32.131 port 42036 Oct 27 13:23:28.592972 sshd[2350]: Connection closed by invalid user user 109.160.32.131 port 42036 [preauth] Oct 27 13:23:28.594753 systemd[1]: sshd@2-4098-10.0.0.24:22-109.160.32.131:42036.service: Deactivated successfully. Oct 27 13:23:28.950222 systemd[1]: Started sshd@3-4099-10.0.0.24:22-67.177.253.84:54868.service - OpenSSH per-connection server daemon (67.177.253.84:54868). Oct 27 13:23:29.685255 sshd[2356]: kex_exchange_identification: read: Connection reset by peer [preauth] Oct 27 13:23:29.685255 sshd[2356]: Connection reset by 67.177.253.84 port 54868 [preauth] Oct 27 13:23:29.686571 systemd[1]: sshd@3-4099-10.0.0.24:22-67.177.253.84:54868.service: Deactivated successfully. Oct 27 13:23:32.950821 systemd[1]: Started sshd@4-4100-10.0.0.24:22-109.160.32.131:48292.service - OpenSSH per-connection server daemon (109.160.32.131:48292). Oct 27 13:23:33.458560 sshd[2362]: Invalid user admin1 from 109.160.32.131 port 48292 Oct 27 13:23:33.606893 sshd[2362]: Connection closed by invalid user admin1 109.160.32.131 port 48292 [preauth] Oct 27 13:23:33.608635 systemd[1]: sshd@4-4100-10.0.0.24:22-109.160.32.131:48292.service: Deactivated successfully. Oct 27 13:23:35.550042 chronyd[1917]: Selected source PHC0 Oct 27 13:23:37.451361 systemd[1]: Started sshd@5-4101-10.0.0.24:22-20.31.226.197:41908.service - OpenSSH per-connection server daemon (20.31.226.197:41908). Oct 27 13:23:38.167266 sshd[2368]: Accepted publickey for core from 20.31.226.197 port 41908 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:38.168306 sshd-session[2368]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:38.180212 systemd[1]: Starting user@500.service - User Manager for UID 500... Oct 27 13:23:38.182266 systemd-logind[1931]: New session '3' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:38.189326 (systemd)[2372]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:38.191641 systemd-logind[1931]: New session '4' of user 'core' with class 'manager-early' and type 'unspecified'. Oct 27 13:23:38.294374 systemd[1]: Started sshd@6-2-10.0.0.24:22-109.160.32.131:48352.service - OpenSSH per-connection server daemon (109.160.32.131:48352). Oct 27 13:23:38.387889 systemd[2372]: Queued start job for default target default.target. Oct 27 13:23:38.394854 systemd[2372]: Created slice app.slice - User Application Slice. Oct 27 13:23:38.395013 systemd[2372]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Oct 27 13:23:38.395118 systemd[2372]: Reached target machines.target - Virtual Machines and Containers. Oct 27 13:23:38.395168 systemd[2372]: Reached target paths.target - Paths. Oct 27 13:23:38.395187 systemd[2372]: Reached target timers.target - Timers. Oct 27 13:23:38.396353 systemd[2372]: Starting dbus.socket - D-Bus User Message Bus Socket... Oct 27 13:23:38.397569 systemd[2372]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Oct 27 13:23:38.397818 systemd[2372]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Oct 27 13:23:38.398623 systemd[2372]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Oct 27 13:23:38.398937 systemd[2372]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Oct 27 13:23:38.400309 systemd[2372]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Oct 27 13:23:38.407510 systemd[2372]: Listening on dbus.socket - D-Bus User Message Bus Socket. Oct 27 13:23:38.407575 systemd[2372]: Reached target sockets.target - Sockets. Oct 27 13:23:38.413177 systemd[2372]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Oct 27 13:23:38.413264 systemd[2372]: Reached target basic.target - Basic System. Oct 27 13:23:38.413304 systemd[2372]: Reached target default.target - Main User Target. Oct 27 13:23:38.413325 systemd[2372]: Startup finished in 217ms. Oct 27 13:23:38.413660 systemd[1]: Started user@500.service - User Manager for UID 500. Oct 27 13:23:38.417230 systemd[1]: Started session-3.scope - Session 3 of User core. Oct 27 13:23:38.859149 systemd[1]: Started sshd@7-4102-10.0.0.24:22-20.31.226.197:41914.service - OpenSSH per-connection server daemon (20.31.226.197:41914). Oct 27 13:23:39.225309 sshd[2380]: Invalid user user2 from 109.160.32.131 port 48352 Oct 27 13:23:39.437029 sshd[2380]: Connection closed by invalid user user2 109.160.32.131 port 48352 [preauth] Oct 27 13:23:39.438598 systemd[1]: sshd@6-2-10.0.0.24:22-109.160.32.131:48352.service: Deactivated successfully. Oct 27 13:23:39.615250 sshd[2390]: Accepted publickey for core from 20.31.226.197 port 41914 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:39.616320 sshd-session[2390]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:39.620688 systemd-logind[1931]: New session '5' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:39.630251 systemd[1]: Started session-5.scope - Session 5 of User core. Oct 27 13:23:40.051059 sshd[2396]: Connection closed by 20.31.226.197 port 41914 Oct 27 13:23:40.051690 sshd-session[2390]: pam_unix(sshd:session): session closed for user core Oct 27 13:23:40.054458 systemd[1]: sshd@7-4102-10.0.0.24:22-20.31.226.197:41914.service: Deactivated successfully. Oct 27 13:23:40.056271 systemd[1]: session-5.scope: Deactivated successfully. Oct 27 13:23:40.057018 systemd-logind[1931]: Session 5 logged out. Waiting for processes to exit. Oct 27 13:23:40.058457 systemd-logind[1931]: Removed session 5. Oct 27 13:23:40.204029 systemd[1]: Started sshd@8-4103-10.0.0.24:22-20.31.226.197:41928.service - OpenSSH per-connection server daemon (20.31.226.197:41928). Oct 27 13:23:40.958121 sshd[2402]: Accepted publickey for core from 20.31.226.197 port 41928 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:40.959181 sshd-session[2402]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:40.963091 systemd-logind[1931]: New session '6' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:40.971250 systemd[1]: Started session-6.scope - Session 6 of User core. Oct 27 13:23:41.389331 sshd[2406]: Connection closed by 20.31.226.197 port 41928 Oct 27 13:23:41.389949 sshd-session[2402]: pam_unix(sshd:session): session closed for user core Oct 27 13:23:41.393347 systemd[1]: sshd@8-4103-10.0.0.24:22-20.31.226.197:41928.service: Deactivated successfully. Oct 27 13:23:41.395520 systemd[1]: session-6.scope: Deactivated successfully. Oct 27 13:23:41.398233 systemd-logind[1931]: Session 6 logged out. Waiting for processes to exit. Oct 27 13:23:41.399669 systemd-logind[1931]: Removed session 6. Oct 27 13:23:41.544691 systemd[1]: Started sshd@9-4104-10.0.0.24:22-20.31.226.197:44458.service - OpenSSH per-connection server daemon (20.31.226.197:44458). Oct 27 13:23:42.300083 sshd[2412]: Accepted publickey for core from 20.31.226.197 port 44458 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:42.301213 sshd-session[2412]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:42.305038 systemd-logind[1931]: New session '7' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:42.313421 systemd[1]: Started session-7.scope - Session 7 of User core. Oct 27 13:23:42.735488 sshd[2416]: Connection closed by 20.31.226.197 port 44458 Oct 27 13:23:42.735337 sshd-session[2412]: pam_unix(sshd:session): session closed for user core Oct 27 13:23:42.738572 systemd[1]: sshd@9-4104-10.0.0.24:22-20.31.226.197:44458.service: Deactivated successfully. Oct 27 13:23:42.740544 systemd[1]: session-7.scope: Deactivated successfully. Oct 27 13:23:42.741602 systemd-logind[1931]: Session 7 logged out. Waiting for processes to exit. Oct 27 13:23:42.743976 systemd-logind[1931]: Removed session 7. Oct 27 13:23:42.878205 systemd[1]: Started sshd@10-4105-10.0.0.24:22-20.31.226.197:44460.service - OpenSSH per-connection server daemon (20.31.226.197:44460). Oct 27 13:23:43.613825 sshd[2422]: Accepted publickey for core from 20.31.226.197 port 44460 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:43.614679 sshd-session[2422]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:43.618580 systemd-logind[1931]: New session '8' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:43.626233 systemd[1]: Started session-8.scope - Session 8 of User core. Oct 27 13:23:43.858529 systemd[1]: Started sshd@11-4106-10.0.0.24:22-109.160.32.131:53186.service - OpenSSH per-connection server daemon (109.160.32.131:53186). Oct 27 13:23:44.133824 sudo[2431]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 27 13:23:44.134063 sudo[2431]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:23:44.164830 sudo[2431]: pam_unix(sudo:session): session closed for user root Oct 27 13:23:44.304931 sshd[2426]: Connection closed by 20.31.226.197 port 44460 Oct 27 13:23:44.305739 sshd-session[2422]: pam_unix(sshd:session): session closed for user core Oct 27 13:23:44.309074 systemd[1]: sshd@10-4105-10.0.0.24:22-20.31.226.197:44460.service: Deactivated successfully. Oct 27 13:23:44.311083 systemd[1]: session-8.scope: Deactivated successfully. Oct 27 13:23:44.312169 systemd-logind[1931]: Session 8 logged out. Waiting for processes to exit. Oct 27 13:23:44.313891 systemd-logind[1931]: Removed session 8. Oct 27 13:23:44.466014 systemd[1]: Started sshd@12-3-10.0.0.24:22-20.31.226.197:44474.service - OpenSSH per-connection server daemon (20.31.226.197:44474). Oct 27 13:23:44.877739 sshd[2428]: Invalid user deploy from 109.160.32.131 port 53186 Oct 27 13:23:45.071732 sshd[2428]: Connection closed by invalid user deploy 109.160.32.131 port 53186 [preauth] Oct 27 13:23:45.073581 systemd[1]: sshd@11-4106-10.0.0.24:22-109.160.32.131:53186.service: Deactivated successfully. Oct 27 13:23:45.221686 sshd[2438]: Accepted publickey for core from 20.31.226.197 port 44474 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:45.222631 sshd-session[2438]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:45.226783 systemd-logind[1931]: New session '9' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:45.238494 systemd[1]: Started session-9.scope - Session 9 of User core. Oct 27 13:23:45.514761 sudo[2446]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 27 13:23:45.514969 sudo[2446]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:23:45.516351 sudo[2446]: pam_unix(sudo:session): session closed for user root Oct 27 13:23:45.521139 sudo[2445]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Oct 27 13:23:45.521339 sudo[2445]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:23:45.527727 systemd[1]: Starting audit-rules.service - Load Audit Rules... Oct 27 13:23:45.571000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 27 13:23:45.571000 audit[2470]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe635ad00 a2=420 a3=0 items=0 ppid=2451 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:45.586703 augenrules[2470]: No rules Oct 27 13:23:45.588473 systemd[1]: audit-rules.service: Deactivated successfully. Oct 27 13:23:45.588885 systemd[1]: Finished audit-rules.service - Load Audit Rules. Oct 27 13:23:45.604032 kernel: audit: type=1305 audit(1793107425.571:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 27 13:23:45.604119 kernel: audit: type=1300 audit(1793107425.571:169): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe635ad00 a2=420 a3=0 items=0 ppid=2451 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:45.604380 sudo[2445]: pam_unix(sudo:session): session closed for user root Oct 27 13:23:45.571000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 27 13:23:45.612753 kernel: audit: type=1327 audit(1793107425.571:169): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 27 13:23:45.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.612862 kernel: audit: type=1130 audit(1793107425.586:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.637759 kernel: audit: type=1131 audit(1793107425.586:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.603000 audit[2445]: AUDIT1106 pid=2445 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.603000 audit[2445]: AUDIT1104 pid=2445 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.651585 kernel: audit: type=1106 audit(1793107425.603:172): pid=2445 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.651606 kernel: audit: type=1104 audit(1793107425.603:173): pid=2445 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.749050 sshd[2444]: Connection closed by 20.31.226.197 port 44474 Oct 27 13:23:45.748732 sshd-session[2438]: pam_unix(sshd:session): session closed for user core Oct 27 13:23:45.748000 audit[2438]: AUDIT1106 pid=2438 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:45.748000 audit[2438]: AUDIT1104 pid=2438 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:45.771660 systemd[1]: sshd@12-3-10.0.0.24:22-20.31.226.197:44474.service: Deactivated successfully. Oct 27 13:23:45.773785 systemd[1]: session-9.scope: Deactivated successfully. Oct 27 13:23:45.774797 systemd-logind[1931]: Session 9 logged out. Waiting for processes to exit. Oct 27 13:23:45.776756 systemd-logind[1931]: Removed session 9. Oct 27 13:23:45.783448 kernel: audit: type=1106 audit(1793107425.748:174): pid=2438 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:45.783511 kernel: audit: type=1104 audit(1793107425.748:175): pid=2438 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:45.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-3-10.0.0.24:22-20.31.226.197:44474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.796742 kernel: audit: type=1131 audit(1793107425.770:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-3-10.0.0.24:22-20.31.226.197:44474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4-10.0.0.24:22-20.31.226.197:44476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:45.907590 systemd[1]: Started sshd@13-4-10.0.0.24:22-20.31.226.197:44476.service - OpenSSH per-connection server daemon (20.31.226.197:44476). Oct 27 13:23:46.665000 audit[2479]: AUDIT1101 pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:46.667170 sshd[2479]: Accepted publickey for core from 20.31.226.197 port 44476 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:23:46.666000 audit[2479]: AUDIT1103 pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:46.666000 audit[2479]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc3110440 a2=3 a3=0 items=0 ppid=1 pid=2479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:46.666000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:23:46.668160 sshd-session[2479]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:23:46.672144 systemd-logind[1931]: New session '10' of user 'core' with class 'user' and type 'tty'. Oct 27 13:23:46.680258 systemd[1]: Started session-10.scope - Session 10 of User core. Oct 27 13:23:46.681000 audit[2479]: AUDIT1105 pid=2479 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:46.682000 audit[2483]: AUDIT1103 pid=2483 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:23:49.405236 systemd[1]: Started sshd@14-4107-10.0.0.24:22-109.160.32.131:53228.service - OpenSSH per-connection server daemon (109.160.32.131:53228). Oct 27 13:23:49.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4107-10.0.0.24:22-109.160.32.131:53228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:49.929907 sshd[2494]: Invalid user v1 from 109.160.32.131 port 53228 Oct 27 13:23:50.442860 sshd[2494]: Connection closed by invalid user v1 109.160.32.131 port 53228 [preauth] Oct 27 13:23:50.443000 audit[2494]: AUDIT1109 pid=2494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:23:50.444663 systemd[1]: sshd@14-4107-10.0.0.24:22-109.160.32.131:53228.service: Deactivated successfully. Oct 27 13:23:50.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4107-10.0.0.24:22-109.160.32.131:53228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:51.279830 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 27 13:23:54.393890 systemd[1]: Started sshd@15-4108-10.0.0.24:22-109.160.32.131:34874.service - OpenSSH per-connection server daemon (109.160.32.131:34874). Oct 27 13:23:54.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4108-10.0.0.24:22-109.160.32.131:34874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:54.399288 kernel: kauditd_printk_skb: 11 callbacks suppressed Oct 27 13:23:54.399317 kernel: audit: type=1130 audit(1793107434.393:186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4108-10.0.0.24:22-109.160.32.131:34874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:54.462193 systemd[1]: Starting docker.service - Docker Application Container Engine... Oct 27 13:23:54.479117 (dockerd)[2508]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Oct 27 13:23:55.437164 sshd[2505]: Invalid user jira from 109.160.32.131 port 34874 Oct 27 13:23:55.728226 sshd[2505]: Connection closed by invalid user jira 109.160.32.131 port 34874 [preauth] Oct 27 13:23:55.727000 audit[2505]: AUDIT1109 pid=2505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:23:55.731887 systemd[1]: sshd@15-4108-10.0.0.24:22-109.160.32.131:34874.service: Deactivated successfully. Oct 27 13:23:55.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4108-10.0.0.24:22-109.160.32.131:34874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:55.757320 kernel: audit: type=1109 audit(1793107435.727:187): pid=2505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:23:55.757386 kernel: audit: type=1131 audit(1793107435.731:188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4108-10.0.0.24:22-109.160.32.131:34874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:23:56.820369 update_engine[1934]: I20261027 13:23:56.820281 1934 update_attempter.cc:509] Updating boot flags... Oct 27 13:23:59.202751 dockerd[2508]: time="2026-10-27T13:23:59.202679328Z" level=info msg="Starting up" Oct 27 13:23:59.221234 dockerd[2508]: time="2026-10-27T13:23:59.220535455Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Oct 27 13:23:59.247607 dockerd[2508]: time="2026-10-27T13:23:59.247515289Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Oct 27 13:23:59.425225 dockerd[2508]: time="2026-10-27T13:23:59.425185305Z" level=info msg="Loading containers: start." Oct 27 13:23:59.452120 kernel: Initializing XFRM netlink socket Oct 27 13:23:59.506000 audit[2675]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.506000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd3590640 a2=0 a3=0 items=0 ppid=2508 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.533030 kernel: audit: type=1325 audit(1793107439.506:189): table=nat:5 family=2 entries=2 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.533084 kernel: audit: type=1300 audit(1793107439.506:189): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd3590640 a2=0 a3=0 items=0 ppid=2508 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.506000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 27 13:23:59.541198 kernel: audit: type=1327 audit(1793107439.506:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 27 13:23:59.533000 audit[2677]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.549611 kernel: audit: type=1325 audit(1793107439.533:190): table=filter:6 family=2 entries=2 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.533000 audit[2677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe168ace0 a2=0 a3=0 items=0 ppid=2508 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.566903 kernel: audit: type=1300 audit(1793107439.533:190): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe168ace0 a2=0 a3=0 items=0 ppid=2508 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.533000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 27 13:23:59.575614 kernel: audit: type=1327 audit(1793107439.533:190): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 27 13:23:59.549000 audit[2679]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.584616 kernel: audit: type=1325 audit(1793107439.549:191): table=filter:7 family=2 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.549000 audit[2679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe995e7d0 a2=0 a3=0 items=0 ppid=2508 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.601919 kernel: audit: type=1300 audit(1793107439.549:191): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe995e7d0 a2=0 a3=0 items=0 ppid=2508 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Oct 27 13:23:59.611123 kernel: audit: type=1327 audit(1793107439.549:191): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Oct 27 13:23:59.567000 audit[2681]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.620010 kernel: audit: type=1325 audit(1793107439.567:192): table=filter:8 family=2 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.567000 audit[2681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbce1190 a2=0 a3=0 items=0 ppid=2508 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.567000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Oct 27 13:23:59.567000 audit[2683]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.567000 audit[2683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc04eaf00 a2=0 a3=0 items=0 ppid=2508 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.567000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Oct 27 13:23:59.567000 audit[2685]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.567000 audit[2685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe8e729f0 a2=0 a3=0 items=0 ppid=2508 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.567000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 27 13:23:59.572000 audit[2687]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.572000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdb0a9140 a2=0 a3=0 items=0 ppid=2508 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.572000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 27 13:23:59.572000 audit[2689]: NETFILTER_CFG table=nat:12 family=2 entries=2 op=nft_register_chain pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.572000 audit[2689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=384 a0=3 a1=ffffc9e66900 a2=0 a3=0 items=0 ppid=2508 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.572000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 27 13:23:59.676000 audit[2692]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.676000 audit[2692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=472 a0=3 a1=ffffdb197310 a2=0 a3=0 items=0 ppid=2508 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.676000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 27 13:23:59.678000 audit[2694]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.678000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffd0d6fb60 a2=0 a3=0 items=0 ppid=2508 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.678000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Oct 27 13:23:59.680000 audit[2696]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.680000 audit[2696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=236 a0=3 a1=ffffd2852900 a2=0 a3=0 items=0 ppid=2508 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.680000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Oct 27 13:23:59.681000 audit[2698]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.681000 audit[2698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=248 a0=3 a1=fffffda75e70 a2=0 a3=0 items=0 ppid=2508 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.681000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 27 13:23:59.683000 audit[2700]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_rule pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.683000 audit[2700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=232 a0=3 a1=ffffe8b03550 a2=0 a3=0 items=0 ppid=2508 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Oct 27 13:23:59.735000 audit[2730]: NETFILTER_CFG table=nat:18 family=10 entries=2 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.735000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe769c470 a2=0 a3=0 items=0 ppid=2508 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.735000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 27 13:23:59.736000 audit[2732]: NETFILTER_CFG table=filter:19 family=10 entries=2 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.736000 audit[2732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcad37f10 a2=0 a3=0 items=0 ppid=2508 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.736000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 27 13:23:59.738000 audit[2734]: NETFILTER_CFG table=filter:20 family=10 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.738000 audit[2734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf4dcb70 a2=0 a3=0 items=0 ppid=2508 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Oct 27 13:23:59.739000 audit[2736]: NETFILTER_CFG table=filter:21 family=10 entries=1 op=nft_register_chain pid=2736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.739000 audit[2736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff61da340 a2=0 a3=0 items=0 ppid=2508 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.739000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Oct 27 13:23:59.741000 audit[2738]: NETFILTER_CFG table=filter:22 family=10 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.741000 audit[2738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff2e4f640 a2=0 a3=0 items=0 ppid=2508 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.741000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Oct 27 13:23:59.742000 audit[2740]: NETFILTER_CFG table=filter:23 family=10 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.742000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc765bfc0 a2=0 a3=0 items=0 ppid=2508 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.742000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 27 13:23:59.744000 audit[2742]: NETFILTER_CFG table=filter:24 family=10 entries=1 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.744000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe1146a00 a2=0 a3=0 items=0 ppid=2508 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.744000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 27 13:23:59.745000 audit[2744]: NETFILTER_CFG table=nat:25 family=10 entries=2 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.745000 audit[2744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=384 a0=3 a1=ffffc76d03c0 a2=0 a3=0 items=0 ppid=2508 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 27 13:23:59.748000 audit[2746]: NETFILTER_CFG table=nat:26 family=10 entries=2 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.748000 audit[2746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=484 a0=3 a1=fffff1635e90 a2=0 a3=0 items=0 ppid=2508 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003A3A312F313238 Oct 27 13:23:59.750000 audit[2748]: NETFILTER_CFG table=filter:27 family=10 entries=2 op=nft_register_chain pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.750000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffd9199590 a2=0 a3=0 items=0 ppid=2508 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.750000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Oct 27 13:23:59.751000 audit[2750]: NETFILTER_CFG table=filter:28 family=10 entries=1 op=nft_register_rule pid=2750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.751000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=236 a0=3 a1=fffff3bfa680 a2=0 a3=0 items=0 ppid=2508 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.751000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Oct 27 13:23:59.753000 audit[2752]: NETFILTER_CFG table=filter:29 family=10 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.753000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=248 a0=3 a1=ffffec0098e0 a2=0 a3=0 items=0 ppid=2508 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 27 13:23:59.754000 audit[2754]: NETFILTER_CFG table=filter:30 family=10 entries=1 op=nft_register_rule pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.754000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=232 a0=3 a1=ffffe8296410 a2=0 a3=0 items=0 ppid=2508 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.754000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Oct 27 13:23:59.758000 audit[2759]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.758000 audit[2759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeacea080 a2=0 a3=0 items=0 ppid=2508 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.758000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 27 13:23:59.760000 audit[2761]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.760000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdd2fa420 a2=0 a3=0 items=0 ppid=2508 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.760000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 27 13:23:59.761000 audit[2763]: NETFILTER_CFG table=filter:33 family=10 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.761000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe6f19a30 a2=0 a3=0 items=0 ppid=2508 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.761000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 27 13:23:59.763000 audit[2765]: NETFILTER_CFG table=filter:34 family=10 entries=1 op=nft_register_rule pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 27 13:23:59.763000 audit[2765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcfe4d610 a2=0 a3=0 items=0 ppid=2508 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 27 13:23:59.824000 audit[2769]: NETFILTER_CFG table=nat:35 family=2 entries=2 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.824000 audit[2769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=520 a0=3 a1=ffffd248f750 a2=0 a3=0 items=0 ppid=2508 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.824000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 27 13:23:59.827000 audit[2771]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.827000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe0abda70 a2=0 a3=0 items=0 ppid=2508 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.827000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 27 13:23:59.834000 audit[2779]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.834000 audit[2779]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=300 a0=3 a1=fffff41db9e0 a2=0 a3=0 items=0 ppid=2508 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.834000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 Oct 27 13:23:59.838000 audit[2784]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_rule pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.838000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdde2c7d0 a2=0 a3=0 items=0 ppid=2508 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.838000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D6A0044524F50 Oct 27 13:23:59.840000 audit[2786]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.840000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=512 a0=3 a1=fffff3f28b80 a2=0 a3=0 items=0 ppid=2508 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.840000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D4354002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 27 13:23:59.841000 audit[2788]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_rule pid=2788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.841000 audit[2788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd9759ab0 a2=0 a3=0 items=0 ppid=2508 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.841000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D425249444745002D6F00646F636B657230002D6A00444F434B4552 Oct 27 13:23:59.843000 audit[2790]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_rule pid=2790 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.843000 audit[2790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffce7b51f0 a2=0 a3=0 items=0 ppid=2508 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 27 13:23:59.845000 audit[2792]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:23:59.845000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe76cd820 a2=0 a3=0 items=0 ppid=2508 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:23:59.845000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 27 13:23:59.848650 systemd-networkd[1681]: docker0: Link UP Oct 27 13:23:59.861326 dockerd[2508]: time="2026-10-27T13:23:59.861290603Z" level=info msg="Loading containers: done." Oct 27 13:24:00.034459 dockerd[2508]: time="2026-10-27T13:24:00.034406912Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 27 13:24:00.034661 dockerd[2508]: time="2026-10-27T13:24:00.034516462Z" level=info msg="Docker daemon" commit=45873be4ae3f5488c9498b3d9f17deaddaf609f4 containerd-snapshotter=false storage-driver=overlay2 version=28.2.2 Oct 27 13:24:00.051372 dockerd[2508]: time="2026-10-27T13:24:00.051337691Z" level=info msg="Initializing buildkit" Oct 27 13:24:00.083703 dockerd[2508]: time="2026-10-27T13:24:00.083581347Z" level=warning msg="CDI setup error /etc/cdi: failed to monitor for changes: no such file or directory" Oct 27 13:24:00.083703 dockerd[2508]: time="2026-10-27T13:24:00.083643562Z" level=warning msg="CDI setup error /var/run/cdi: failed to monitor for changes: no such file or directory" Oct 27 13:24:00.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-5-10.0.0.24:22-109.160.32.131:34940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:00.106372 systemd[1]: Started sshd@16-5-10.0.0.24:22-109.160.32.131:34940.service - OpenSSH per-connection server daemon (109.160.32.131:34940). Oct 27 13:24:00.129162 dockerd[2508]: time="2026-10-27T13:24:00.129079450Z" level=info msg="Completed buildkit initialization" Oct 27 13:24:00.133712 dockerd[2508]: time="2026-10-27T13:24:00.133667681Z" level=info msg="Daemon has completed initialization" Oct 27 13:24:00.133799 dockerd[2508]: time="2026-10-27T13:24:00.133727016Z" level=info msg="API listen on /run/docker.sock" Oct 27 13:24:00.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:00.134408 systemd[1]: Started docker.service - Docker Application Container Engine. Oct 27 13:24:00.288338 sshd[2483]: Connection closed by 20.31.226.197 port 44476 Oct 27 13:24:00.287769 sshd-session[2479]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:00.287000 audit[2479]: AUDIT1106 pid=2479 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:00.287000 audit[2479]: AUDIT1104 pid=2479 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:00.290683 systemd[1]: sshd@13-4-10.0.0.24:22-20.31.226.197:44476.service: Deactivated successfully. Oct 27 13:24:00.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4-10.0.0.24:22-20.31.226.197:44476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:00.292540 systemd[1]: session-10.scope: Deactivated successfully. Oct 27 13:24:00.292879 systemd[1]: session-10.scope: Consumed 70ms CPU time over 13.612s wall clock time, 106M memory peak. Oct 27 13:24:00.294726 systemd-logind[1931]: Session 10 logged out. Waiting for processes to exit. Oct 27 13:24:00.295719 systemd-logind[1931]: Removed session 10. Oct 27 13:24:00.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-6-10.0.0.24:22-20.31.226.197:60602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:00.443918 systemd[1]: Started sshd@17-6-10.0.0.24:22-20.31.226.197:60602.service - OpenSSH per-connection server daemon (20.31.226.197:60602). Oct 27 13:24:00.907828 sshd[2820]: Invalid user jack from 109.160.32.131 port 34940 Oct 27 13:24:01.052669 sshd[2820]: Connection closed by invalid user jack 109.160.32.131 port 34940 [preauth] Oct 27 13:24:01.052000 audit[2820]: AUDIT1109 pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:01.054934 systemd[1]: sshd@16-5-10.0.0.24:22-109.160.32.131:34940.service: Deactivated successfully. Oct 27 13:24:01.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-5-10.0.0.24:22-109.160.32.131:34940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.206000 audit[2834]: AUDIT1101 pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:01.207648 sshd[2834]: Accepted publickey for core from 20.31.226.197 port 60602 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:01.207000 audit[2834]: AUDIT1103 pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:01.207000 audit[2834]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff653d230 a2=3 a3=0 items=0 ppid=1 pid=2834 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:01.207000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:01.208945 sshd-session[2834]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:01.212807 systemd-logind[1931]: New session '11' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:01.219408 systemd[1]: Started session-11.scope - Session 11 of User core. Oct 27 13:24:01.220000 audit[2834]: AUDIT1105 pid=2834 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:01.221000 audit[2840]: AUDIT1103 pid=2840 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:01.503000 audit[2845]: AUDIT1101 pid=2845 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.503000 audit[2845]: AUDIT1110 pid=2845 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.503000 audit[2845]: AUDIT1105 pid=2845 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.504353 sudo[2845]: core : PWD=/tmp/tmp.FYLucRp2W5 ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sleep Oct 27 13:24:01.504562 sudo[2845]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:01.530219 sudo[2845]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:01.529000 audit[2845]: AUDIT1106 pid=2845 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.529000 audit[2845]: AUDIT1104 pid=2845 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.535000 audit[2854]: AUDIT1101 pid=2854 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.536662 sudo[2854]: core : PWD=/tmp/tmp.FYLucRp2W5 ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sleep /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 ./ Oct 27 13:24:01.536881 sudo[2854]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:01.535000 audit[2854]: AUDIT1110 pid=2854 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.535000 audit[2854]: AUDIT1105 pid=2854 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.627519 sudo[2854]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:01.626000 audit[2854]: AUDIT1106 pid=2854 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.626000 audit[2854]: AUDIT1104 pid=2854 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.632000 audit[2841]: AUDIT1101 pid=2841 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.633527 sudo[2841]: core : PWD=/tmp/tmp.FYLucRp2W5 ; USER=root ; COMMAND=/usr/sbin/docker build -t sleep . Oct 27 13:24:01.632000 audit[2841]: AUDIT1110 pid=2841 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.634160 sudo[2841]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:01.633000 audit[2841]: AUDIT1105 pid=2841 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:01.723116 dockerd[2508]: 2026/10/27 13:24:01 http2: server: error reading preface from client @: read unix /run/docker.sock->@: read: connection reset by peer Oct 27 13:24:02.455000 audit[2841]: AUDIT1106 pid=2841 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:02.456785 sudo[2841]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:02.456000 audit[2841]: AUDIT1104 pid=2841 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:02.601489 sshd[2840]: Connection closed by 20.31.226.197 port 60602 Oct 27 13:24:02.602092 sshd-session[2834]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:02.602000 audit[2834]: AUDIT1106 pid=2834 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:02.602000 audit[2834]: AUDIT1104 pid=2834 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:02.605701 systemd[1]: sshd@17-6-10.0.0.24:22-20.31.226.197:60602.service: Deactivated successfully. Oct 27 13:24:02.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-6-10.0.0.24:22-20.31.226.197:60602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:02.607608 systemd[1]: session-11.scope: Deactivated successfully. Oct 27 13:24:02.608311 systemd-logind[1931]: Session 11 logged out. Waiting for processes to exit. Oct 27 13:24:02.609361 systemd-logind[1931]: Removed session 11. Oct 27 13:24:02.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-7-10.0.0.24:22-20.31.226.197:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:02.740768 systemd[1]: Started sshd@18-7-10.0.0.24:22-20.31.226.197:60614.service - OpenSSH per-connection server daemon (20.31.226.197:60614). Oct 27 13:24:03.147630 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount4100402079.mount: Deactivated successfully. Oct 27 13:24:03.458000 audit[2899]: AUDIT1101 pid=2899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.459911 sshd[2899]: Accepted publickey for core from 20.31.226.197 port 60614 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:03.459000 audit[2899]: AUDIT1103 pid=2899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.459000 audit[2899]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcf719d20 a2=3 a3=0 items=0 ppid=1 pid=2899 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:03.459000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:03.461286 sshd-session[2899]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:03.464883 systemd-logind[1931]: New session '12' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:03.475239 systemd[1]: Started session-12.scope - Session 12 of User core. Oct 27 13:24:03.476000 audit[2899]: AUDIT1105 pid=2899 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.477000 audit[2903]: AUDIT1103 pid=2903 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.914236 sshd[2903]: Connection closed by 20.31.226.197 port 60614 Oct 27 13:24:03.914913 sshd-session[2899]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:03.914000 audit[2899]: AUDIT1106 pid=2899 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.914000 audit[2899]: AUDIT1104 pid=2899 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:03.918278 systemd[1]: sshd@18-7-10.0.0.24:22-20.31.226.197:60614.service: Deactivated successfully. Oct 27 13:24:03.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-7-10.0.0.24:22-20.31.226.197:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:03.920637 systemd[1]: session-12.scope: Deactivated successfully. Oct 27 13:24:03.921985 systemd-logind[1931]: Session 12 logged out. Waiting for processes to exit. Oct 27 13:24:03.924119 systemd-logind[1931]: Removed session 12. Oct 27 13:24:04.085701 systemd[1]: Started sshd@19-4109-10.0.0.24:22-20.31.226.197:60698.service - OpenSSH per-connection server daemon (20.31.226.197:60698). Oct 27 13:24:04.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-10.0.0.24:22-20.31.226.197:60698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.087326 systemd[1]: Started sshd@20-4110-10.0.0.24:22-20.31.226.197:60686.service - OpenSSH per-connection server daemon (20.31.226.197:60686). Oct 27 13:24:04.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-10.0.0.24:22-20.31.226.197:60686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.088308 systemd[1]: Started sshd@21-4111-10.0.0.24:22-20.31.226.197:60654.service - OpenSSH per-connection server daemon (20.31.226.197:60654). Oct 27 13:24:04.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4111-10.0.0.24:22-20.31.226.197:60654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.089164 systemd[1]: Started sshd@22-4112-10.0.0.24:22-20.31.226.197:60628.service - OpenSSH per-connection server daemon (20.31.226.197:60628). Oct 27 13:24:04.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4112-10.0.0.24:22-20.31.226.197:60628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.091435 systemd[1]: Started sshd@23-4113-10.0.0.24:22-20.31.226.197:60682.service - OpenSSH per-connection server daemon (20.31.226.197:60682). Oct 27 13:24:04.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4113-10.0.0.24:22-20.31.226.197:60682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4114-10.0.0.24:22-20.31.226.197:60702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.093406 systemd[1]: Started sshd@24-4114-10.0.0.24:22-20.31.226.197:60702.service - OpenSSH per-connection server daemon (20.31.226.197:60702). Oct 27 13:24:04.095931 systemd[1]: Started sshd@25-4115-10.0.0.24:22-20.31.226.197:60678.service - OpenSSH per-connection server daemon (20.31.226.197:60678). Oct 27 13:24:04.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4115-10.0.0.24:22-20.31.226.197:60678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-4116-10.0.0.24:22-20.31.226.197:60660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.096804 systemd[1]: Started sshd@26-4116-10.0.0.24:22-20.31.226.197:60660.service - OpenSSH per-connection server daemon (20.31.226.197:60660). Oct 27 13:24:04.103569 systemd[1]: Started sshd@27-4117-10.0.0.24:22-20.31.226.197:60662.service - OpenSSH per-connection server daemon (20.31.226.197:60662). Oct 27 13:24:04.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4117-10.0.0.24:22-20.31.226.197:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4118-10.0.0.24:22-20.31.226.197:60626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:04.104440 systemd[1]: Started sshd@28-4118-10.0.0.24:22-20.31.226.197:60626.service - OpenSSH per-connection server daemon (20.31.226.197:60626). Oct 27 13:24:04.862000 audit[2927]: AUDIT1101 pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.866751 kernel: kauditd_printk_skb: 158 callbacks suppressed Oct 27 13:24:04.866828 kernel: audit: type=1101 audit(1793107444.862:277): pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.866965 sshd[2927]: Accepted publickey for core from 20.31.226.197 port 60686 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.883462 sshd-session[2927]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.882000 audit[2927]: AUDIT1103 pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.899880 kernel: audit: type=1103 audit(1793107444.882:278): pid=2927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.900654 sshd[2932]: Accepted publickey for core from 20.31.226.197 port 60678 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.900503 sshd-session[2932]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.905932 sshd[2926]: Accepted publickey for core from 20.31.226.197 port 60698 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.912072 kernel: audit: type=1006 audit(1793107444.882:279): pid=2927 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 27 13:24:04.915235 sshd[2928]: Accepted publickey for core from 20.31.226.197 port 60654 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.882000 audit[2927]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe895d700 a2=3 a3=0 items=0 ppid=1 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.916859 sshd[2929]: Accepted publickey for core from 20.31.226.197 port 60628 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.933062 kernel: audit: type=1300 audit(1793107444.882:279): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe895d700 a2=3 a3=0 items=0 ppid=1 pid=2927 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.932863 sshd-session[2928]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.933694 systemd-logind[1931]: New session '14' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:04.935026 sshd-session[2926]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.882000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.937039 sshd[2931]: Accepted publickey for core from 20.31.226.197 port 60702 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.938356 sshd-session[2931]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.941502 kernel: audit: type=1327 audit(1793107444.882:279): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.942307 systemd[1]: Started session-14.scope - Session 14 of User core. Oct 27 13:24:04.943175 sshd[2930]: Accepted publickey for core from 20.31.226.197 port 60682 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.891000 audit[2932]: AUDIT1101 pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.943397 sshd-session[2929]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.961544 kernel: audit: type=1101 audit(1793107444.891:280): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.899000 audit[2932]: AUDIT1103 pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.980986 kernel: audit: type=1103 audit(1793107444.899:281): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.984177 sshd[2934]: Accepted publickey for core from 20.31.226.197 port 60662 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.985364 sshd-session[2930]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.987168 systemd-logind[1931]: New session '13' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:04.989028 sshd[2933]: Accepted publickey for core from 20.31.226.197 port 60660 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:04.993482 kernel: audit: type=1006 audit(1793107444.899:282): pid=2932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 27 13:24:04.994075 sshd-session[2933]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.994640 sshd-session[2934]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.995459 systemd[1]: Started session-13.scope - Session 13 of User core. Oct 27 13:24:04.899000 audit[2932]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd2b87730 a2=3 a3=0 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.996081 sshd[2935]: Accepted publickey for core from 20.31.226.197 port 60626 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:05.015662 kernel: audit: type=1300 audit(1793107444.899:282): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd2b87730 a2=3 a3=0 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.017291 sshd-session[2935]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:04.899000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:05.024289 kernel: audit: type=1327 audit(1793107444.899:282): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.904000 audit[2926]: AUDIT1101 pid=2926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.912000 audit[2928]: AUDIT1101 pid=2928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.915000 audit[2929]: AUDIT1101 pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.931000 audit[2928]: AUDIT1103 pid=2928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.931000 audit[2928]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe91715b0 a2=3 a3=0 items=0 ppid=1 pid=2928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.931000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.933000 audit[2926]: AUDIT1103 pid=2926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.933000 audit[2926]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff404b8c0 a2=3 a3=0 items=0 ppid=1 pid=2926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.933000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.933000 audit[2930]: AUDIT1101 pid=2930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.935000 audit[2931]: AUDIT1101 pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.936000 audit[2931]: AUDIT1103 pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.936000 audit[2931]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd3b81470 a2=3 a3=0 items=0 ppid=1 pid=2931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.936000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.940000 audit[2929]: AUDIT1103 pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.940000 audit[2929]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe2000380 a2=3 a3=0 items=0 ppid=1 pid=2929 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.940000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.964000 audit[2934]: AUDIT1101 pid=2934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.983000 audit[2930]: AUDIT1103 pid=2930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.983000 audit[2930]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcb1a3e60 a2=3 a3=0 items=0 ppid=1 pid=2930 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.983000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.987000 audit[2933]: AUDIT1101 pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.992000 audit[2933]: AUDIT1103 pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.992000 audit[2933]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe85f9440 a2=3 a3=0 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.992000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.993000 audit[2934]: AUDIT1103 pid=2934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:04.993000 audit[2934]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe385b130 a2=3 a3=0 items=0 ppid=1 pid=2934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:04.993000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:04.994000 audit[2935]: AUDIT1101 pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.015000 audit[2935]: AUDIT1103 pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.015000 audit[2935]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdb8ee670 a2=3 a3=0 items=0 ppid=1 pid=2935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.015000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:05.024506 systemd-logind[1931]: New session '15' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.037249 systemd[1]: Started session-15.scope - Session 15 of User core. Oct 27 13:24:05.039633 systemd-logind[1931]: New session '17' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.040472 systemd[1]: Started session-17.scope - Session 17 of User core. Oct 27 13:24:05.043515 systemd-logind[1931]: New session '16' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.044073 systemd[1]: Started session-16.scope - Session 16 of User core. Oct 27 13:24:05.046414 systemd-logind[1931]: New session '18' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.047565 systemd[1]: Started session-18.scope - Session 18 of User core. Oct 27 13:24:05.050208 systemd-logind[1931]: New session '19' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.050807 systemd[1]: Started session-19.scope - Session 19 of User core. Oct 27 13:24:05.053295 systemd-logind[1931]: New session '21' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.053776 systemd[1]: Started session-21.scope - Session 21 of User core. Oct 27 13:24:05.056149 systemd-logind[1931]: New session '20' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.056668 systemd[1]: Started session-20.scope - Session 20 of User core. Oct 27 13:24:05.058798 systemd-logind[1931]: New session '22' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:05.060140 systemd[1]: Started session-22.scope - Session 22 of User core. Oct 27 13:24:05.061000 audit[2932]: AUDIT1105 pid=2932 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.064000 audit[2927]: AUDIT1105 pid=2927 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.068000 audit[2968]: AUDIT1103 pid=2968 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.068000 audit[2970]: AUDIT1103 pid=2970 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.071000 audit[2931]: AUDIT1105 pid=2931 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.073000 audit[2928]: AUDIT1105 pid=2928 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.079000 audit[2934]: AUDIT1105 pid=2934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.079000 audit[2930]: AUDIT1105 pid=2930 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.081000 audit[2975]: AUDIT1103 pid=2975 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.084000 audit[2935]: AUDIT1105 pid=2935 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.084000 audit[2933]: AUDIT1105 pid=2933 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.085000 audit[2979]: AUDIT1103 pid=2979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.086000 audit[2980]: AUDIT1103 pid=2980 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.088000 audit[2982]: AUDIT1103 pid=2982 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.089000 audit[2926]: AUDIT1105 pid=2926 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.089000 audit[2984]: AUDIT1103 pid=2984 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.091000 audit[2976]: AUDIT1103 pid=2976 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.092000 audit[2929]: AUDIT1105 pid=2929 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.095000 audit[2986]: AUDIT1103 pid=2986 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.096000 audit[2987]: AUDIT1103 pid=2987 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:05.244416 systemd[1]: var-lib-docker-overlay2-e20e42e946030596e4c68364c8527305b1f8878c7b3265484dac2091d4cd1584\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:05.259826 systemd[1]: var-lib-docker-overlay2-36c8f6696e9e9e09f6944e39cd4605f4fef8f4fed247f7759f7070684949193b\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:05.619996 containerd[1962]: time="2026-10-27T13:24:05.619915502Z" level=info msg="connecting to shim 321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212" address="unix:///run/containerd/s/9b084c36790e5777904196c662e55d0643067cf4558f93726155c4397783c390" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.623114 containerd[1962]: time="2026-10-27T13:24:05.622710833Z" level=info msg="connecting to shim 80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a" address="unix:///run/containerd/s/22ebf0f5d377b887cd60cdb03008dd126ae88bf3c896ef258298cf6968ed15c9" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.624238 containerd[1962]: time="2026-10-27T13:24:05.624201500Z" level=info msg="connecting to shim d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7" address="unix:///run/containerd/s/1d029887b0979291fb029b3c3b0158f9093c7854b9f9c6359931efb3639d5cac" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.643300 containerd[1962]: time="2026-10-27T13:24:05.643259969Z" level=info msg="connecting to shim 30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a" address="unix:///run/containerd/s/b1a56d9e90c2eeab33c2ace3930fdc8dd4c557a3f9f447714bd3f4527a5e3260" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.652572 containerd[1962]: time="2026-10-27T13:24:05.652530963Z" level=info msg="connecting to shim e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8" address="unix:///run/containerd/s/c9e1eda214c307b2486753fbe8c6b70ccc1912ecb1865af98c945090cfaf9535" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.655705 containerd[1962]: time="2026-10-27T13:24:05.655674633Z" level=info msg="connecting to shim 02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669" address="unix:///run/containerd/s/1af517a853977cc20485f671dbb8f9fc3fa43fe0ab1df846f47216566bbe5d78" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.667352 containerd[1962]: time="2026-10-27T13:24:05.667312544Z" level=info msg="connecting to shim 75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8" address="unix:///run/containerd/s/fdfe131bf58c6f705a3e2d9a74a7743fa1405f985dcf5aa61611e062efd33299" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.680313 containerd[1962]: time="2026-10-27T13:24:05.680271502Z" level=info msg="connecting to shim 01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4" address="unix:///run/containerd/s/2c73da58291d1b1c967b495917cff4bb1fd137a695a95f7a9e8699a7a3d0b913" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.683784 containerd[1962]: time="2026-10-27T13:24:05.683746535Z" level=info msg="connecting to shim d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77" address="unix:///run/containerd/s/160e2b898bb078c744a29066ed2b30727d8d2d2713777fe67947636d084600b4" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.687322 systemd[1]: Started docker-30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a.scope - libcontainer container 30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a. Oct 27 13:24:05.689427 containerd[1962]: time="2026-10-27T13:24:05.689392746Z" level=info msg="connecting to shim cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018" address="unix:///run/containerd/s/182fcb8ffacc229bf85fe0f46e2e23979cf3311304a793e4f8867b3451ddf20c" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:05.694620 systemd[1]: Started docker-02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669.scope - libcontainer container 02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669. Oct 27 13:24:05.709954 systemd[1]: Started docker-80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a.scope - libcontainer container 80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a. Oct 27 13:24:05.714000 audit: BPF prog-id=53 op=LOAD Oct 27 13:24:05.716000 audit: BPF prog-id=54 op=LOAD Oct 27 13:24:05.716000 audit[3250]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1a76267b1f90 a2=98 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.717000 audit: BPF prog-id=55 op=LOAD Oct 27 13:24:05.717000 audit: BPF prog-id=56 op=LOAD Oct 27 13:24:05.717000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5ab286ba5f90 a2=98 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.719000 audit: BPF prog-id=54 op=UNLOAD Oct 27 13:24:05.719000 audit[3250]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.719000 audit: BPF prog-id=56 op=UNLOAD Oct 27 13:24:05.719000 audit[3208]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.719000 audit: BPF prog-id=57 op=LOAD Oct 27 13:24:05.719000 audit[3250]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1a76267b2268 a2=98 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.720000 audit: BPF prog-id=58 op=LOAD Oct 27 13:24:05.720000 audit[3250]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1a76267b1fa8 a2=98 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.720000 audit: BPF prog-id=58 op=UNLOAD Oct 27 13:24:05.720000 audit[3250]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.720000 audit: BPF prog-id=57 op=UNLOAD Oct 27 13:24:05.720000 audit[3250]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.720000 audit: BPF prog-id=59 op=LOAD Oct 27 13:24:05.720000 audit[3250]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1a76267b24b8 a2=98 a3=0 items=0 ppid=3205 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326236356566313463653864393631666332393839393533 Oct 27 13:24:05.721000 audit: BPF prog-id=60 op=LOAD Oct 27 13:24:05.721000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5ab286ba6268 a2=98 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.721000 audit: BPF prog-id=61 op=LOAD Oct 27 13:24:05.721000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=5ab286ba5fa8 a2=98 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.721000 audit: BPF prog-id=61 op=UNLOAD Oct 27 13:24:05.721000 audit[3208]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.721000 audit: BPF prog-id=60 op=UNLOAD Oct 27 13:24:05.721000 audit[3208]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.721000 audit: BPF prog-id=62 op=LOAD Oct 27 13:24:05.721000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5ab286ba64b8 a2=98 a3=0 items=0 ppid=3174 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33306339386531623233633539313437313737393762616635 Oct 27 13:24:05.728651 systemd[1]: Started docker-d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7.scope - libcontainer container d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7. Oct 27 13:24:05.734000 audit: BPF prog-id=63 op=LOAD Oct 27 13:24:05.735000 audit: BPF prog-id=64 op=LOAD Oct 27 13:24:05.735000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5d6bfeca9f90 a2=98 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.736000 audit: BPF prog-id=64 op=UNLOAD Oct 27 13:24:05.736000 audit[3200]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.738000 audit: BPF prog-id=65 op=LOAD Oct 27 13:24:05.738000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5d6bfecaa268 a2=98 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.739000 audit: BPF prog-id=66 op=LOAD Oct 27 13:24:05.739000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5d6bfeca9fa8 a2=98 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.739000 audit: BPF prog-id=66 op=UNLOAD Oct 27 13:24:05.739000 audit[3200]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.739000 audit: BPF prog-id=65 op=UNLOAD Oct 27 13:24:05.739000 audit[3200]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.739000 audit: BPF prog-id=67 op=LOAD Oct 27 13:24:05.739000 audit[3200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5d6bfecaa4b8 a2=98 a3=0 items=0 ppid=3115 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38306166623534383631666566656432376634636436616161 Oct 27 13:24:05.761000 audit: BPF prog-id=68 op=LOAD Oct 27 13:24:05.761000 audit: BPF prog-id=69 op=LOAD Oct 27 13:24:05.761000 audit[3210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6780da431f90 a2=98 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=69 op=UNLOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=70 op=LOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6780da432268 a2=98 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=71 op=LOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6780da431fa8 a2=98 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=71 op=UNLOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=70 op=UNLOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.766000 audit: BPF prog-id=72 op=LOAD Oct 27 13:24:05.766000 audit[3210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6780da4324b8 a2=98 a3=0 items=0 ppid=3116 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323261383965643535316538356638376430633832313565 Oct 27 13:24:05.772384 systemd[1]: Started docker-321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212.scope - libcontainer container 321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212. Oct 27 13:24:05.774864 systemd[1]: Started docker-75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8.scope - libcontainer container 75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8. Oct 27 13:24:05.793000 audit: BPF prog-id=73 op=LOAD Oct 27 13:24:05.806254 systemd[1]: Started docker-cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018.scope - libcontainer container cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018. Oct 27 13:24:05.807654 systemd[1]: Started docker-e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8.scope - libcontainer container e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8. Oct 27 13:24:05.809000 audit: BPF prog-id=74 op=LOAD Oct 27 13:24:05.809000 audit[3384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a3d0c0a5f90 a2=98 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.809000 audit: BPF prog-id=74 op=UNLOAD Oct 27 13:24:05.809000 audit[3384]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.815384 kernel: docker0: port 1(veth6060603) entered blocking state Oct 27 13:24:05.815523 kernel: docker0: port 1(veth6060603) entered disabled state Oct 27 13:24:05.815000 audit: BPF prog-id=75 op=LOAD Oct 27 13:24:05.815000 audit[3384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a3d0c0a6268 a2=98 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.815000 audit: BPF prog-id=76 op=LOAD Oct 27 13:24:05.815000 audit[3384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2a3d0c0a5fa8 a2=98 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.815000 audit: BPF prog-id=76 op=UNLOAD Oct 27 13:24:05.815000 audit[3384]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.816000 audit: BPF prog-id=77 op=LOAD Oct 27 13:24:05.816000 audit: BPF prog-id=75 op=UNLOAD Oct 27 13:24:05.816000 audit[3384]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.817000 audit: BPF prog-id=78 op=LOAD Oct 27 13:24:05.817000 audit[3280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=70de072b1f90 a2=98 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.823000 audit: BPF prog-id=78 op=UNLOAD Oct 27 13:24:05.823000 audit[3280]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.823000 audit: BPF prog-id=79 op=LOAD Oct 27 13:24:05.823000 audit[3280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=70de072b2268 a2=98 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.824000 audit: BPF prog-id=80 op=LOAD Oct 27 13:24:05.824000 audit[3280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=70de072b1fa8 a2=98 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.828189 kernel: veth6060603: entered allmulticast mode Oct 27 13:24:05.828232 kernel: veth6060603: entered promiscuous mode Oct 27 13:24:05.824000 audit: BPF prog-id=80 op=UNLOAD Oct 27 13:24:05.824000 audit[3280]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.824000 audit: BPF prog-id=79 op=UNLOAD Oct 27 13:24:05.824000 audit[3280]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.824000 audit: BPF prog-id=81 op=LOAD Oct 27 13:24:05.824000 audit[3280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=70de072b24b8 a2=98 a3=0 items=0 ppid=3118 pid=3280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323164313465316563646561626236366235623964653632 Oct 27 13:24:05.816000 audit: BPF prog-id=82 op=LOAD Oct 27 13:24:05.816000 audit[3384]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a3d0c0a64b8 a2=98 a3=0 items=0 ppid=3247 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37356262646137656663383263363166333661363964653737 Oct 27 13:24:05.796000 audit: ANOM_PROMISCUOUS dev=veth6060603 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:05.796000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472ea0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.796000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:05.830260 systemd[1]: Started docker-01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4.scope - libcontainer container 01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4. Oct 27 13:24:05.831892 systemd[1]: Started docker-d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77.scope - libcontainer container d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77. Oct 27 13:24:05.838000 audit[3475]: NETFILTER_CFG table=raw:43 family=2 entries=3 op=nft_register_chain pid=3475 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:05.838000 audit[3475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3d83c00 a2=0 a3=0 items=0 ppid=2508 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.838000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:05.841994 systemd-networkd[1681]: veth6060603: Link UP Oct 27 13:24:05.866837 kernel: docker0: port 2(vethc61b76f) entered blocking state Oct 27 13:24:05.866912 kernel: docker0: port 2(vethc61b76f) entered disabled state Oct 27 13:24:05.870434 kernel: vethc61b76f: entered allmulticast mode Oct 27 13:24:05.872000 audit: BPF prog-id=83 op=LOAD Oct 27 13:24:05.872000 audit: BPF prog-id=84 op=LOAD Oct 27 13:24:05.872000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7ceb1c531f90 a2=98 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.872000 audit: BPF prog-id=84 op=UNLOAD Oct 27 13:24:05.872000 audit[3312]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.873000 audit: BPF prog-id=85 op=LOAD Oct 27 13:24:05.873000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7ceb1c532268 a2=98 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.873000 audit: BPF prog-id=86 op=LOAD Oct 27 13:24:05.873000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7ceb1c531fa8 a2=98 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.873000 audit: BPF prog-id=86 op=UNLOAD Oct 27 13:24:05.873000 audit[3312]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.873000 audit: BPF prog-id=85 op=UNLOAD Oct 27 13:24:05.873000 audit[3312]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.873000 audit: BPF prog-id=87 op=LOAD Oct 27 13:24:05.873000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7ceb1c5324b8 a2=98 a3=0 items=0 ppid=3272 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383831303763376166303737646632646466346264346564 Oct 27 13:24:05.874000 audit: BPF prog-id=88 op=LOAD Oct 27 13:24:05.875000 audit: BPF prog-id=89 op=LOAD Oct 27 13:24:05.876000 audit: BPF prog-id=90 op=LOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f688831f90 a2=98 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=90 op=UNLOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=91 op=LOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f688832268 a2=98 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=92 op=LOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6f688831fa8 a2=98 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=92 op=UNLOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=91 op=UNLOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=93 op=LOAD Oct 27 13:24:05.876000 audit[3316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f6888324b8 a2=98 a3=0 items=0 ppid=3201 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343534646531326561363764663061396532333465666635 Oct 27 13:24:05.876000 audit: BPF prog-id=94 op=LOAD Oct 27 13:24:05.876000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=45e6b9b15f90 a2=98 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.877000 audit: BPF prog-id=94 op=UNLOAD Oct 27 13:24:05.877000 audit[3415]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.878000 audit: BPF prog-id=95 op=LOAD Oct 27 13:24:05.878000 audit: BPF prog-id=96 op=LOAD Oct 27 13:24:05.878000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=45e6b9b16268 a2=98 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.884445 kernel: vethc61b76f: entered promiscuous mode Oct 27 13:24:05.883000 audit: BPF prog-id=97 op=LOAD Oct 27 13:24:05.883000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=45e6b9b15fa8 a2=98 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.883000 audit: BPF prog-id=97 op=UNLOAD Oct 27 13:24:05.883000 audit[3415]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.883000 audit: BPF prog-id=96 op=UNLOAD Oct 27 13:24:05.883000 audit[3415]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.883000 audit: BPF prog-id=98 op=LOAD Oct 27 13:24:05.883000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=45e6b9b164b8 a2=98 a3=0 items=0 ppid=3293 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316432663338336262383262393634643161623361613961 Oct 27 13:24:05.885000 audit: BPF prog-id=99 op=LOAD Oct 27 13:24:05.885000 audit[3396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fca5b9a5f90 a2=98 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=99 op=UNLOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=100 op=LOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fca5b9a6268 a2=98 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=101 op=LOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7fca5b9a5fa8 a2=98 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=101 op=UNLOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=100 op=UNLOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.886000 audit: BPF prog-id=102 op=LOAD Oct 27 13:24:05.886000 audit[3396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fca5b9a64b8 a2=98 a3=0 items=0 ppid=3305 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643364656537303234393037393633376561633235396237 Oct 27 13:24:05.852000 audit: ANOM_PROMISCUOUS dev=vethc61b76f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:05.852000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1473110 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.852000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:05.907117 kernel: eth0: renamed from veth183a592 Oct 27 13:24:05.918701 kernel: docker0: port 1(veth6060603) entered blocking state Oct 27 13:24:05.918771 kernel: docker0: port 1(veth6060603) entered forwarding state Oct 27 13:24:05.920000 audit[3501]: NETFILTER_CFG table=raw:44 family=2 entries=1 op=nft_register_rule pid=3501 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:05.920000 audit[3501]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdf49fdd0 a2=0 a3=0 items=0 ppid=2508 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.920000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:05.924468 systemd-networkd[1681]: veth6060603: Gained carrier Oct 27 13:24:05.924844 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:05.925565 systemd-networkd[1681]: vethc61b76f: Link UP Oct 27 13:24:05.941300 kernel: docker0: port 3(vethbdb125d) entered blocking state Oct 27 13:24:05.941363 kernel: docker0: port 3(vethbdb125d) entered disabled state Oct 27 13:24:05.944425 kernel: vethbdb125d: entered allmulticast mode Oct 27 13:24:05.948094 kernel: vethbdb125d: entered promiscuous mode Oct 27 13:24:05.932000 audit: ANOM_PROMISCUOUS dev=vethbdb125d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:05.932000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1473d70 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.932000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:05.950000 audit[3505]: NETFILTER_CFG table=raw:45 family=2 entries=1 op=nft_register_rule pid=3505 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:05.950000 audit[3505]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcc482380 a2=0 a3=0 items=0 ppid=2508 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.950000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:05.952250 systemd-networkd[1681]: vethbdb125d: Link UP Oct 27 13:24:05.960161 kernel: eth0: renamed from veth085a1e1 Oct 27 13:24:05.968568 kernel: docker0: port 2(vethc61b76f) entered blocking state Oct 27 13:24:05.968512 systemd-networkd[1681]: vethc61b76f: Gained carrier Oct 27 13:24:05.969069 kernel: docker0: port 2(vethc61b76f) entered forwarding state Oct 27 13:24:05.978313 kernel: docker0: port 4(veth41cfbbb) entered blocking state Oct 27 13:24:05.978384 kernel: docker0: port 4(veth41cfbbb) entered disabled state Oct 27 13:24:05.981755 kernel: veth41cfbbb: entered allmulticast mode Oct 27 13:24:05.984769 kernel: veth41cfbbb: entered promiscuous mode Oct 27 13:24:05.969000 audit: ANOM_PROMISCUOUS dev=veth41cfbbb prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:05.969000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1f0c150 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.969000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:05.989106 kernel: eth0: renamed from vethfa52e93 Oct 27 13:24:05.990000 audit[3507]: NETFILTER_CFG table=raw:46 family=2 entries=1 op=nft_register_rule pid=3507 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:05.990000 audit[3507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd57944d0 a2=0 a3=0 items=0 ppid=2508 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:05.990000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:05.997847 kernel: docker0: port 3(vethbdb125d) entered blocking state Oct 27 13:24:05.997866 kernel: docker0: port 3(vethbdb125d) entered forwarding state Oct 27 13:24:06.000379 systemd-networkd[1681]: vethbdb125d: Gained carrier Oct 27 13:24:06.000566 systemd-networkd[1681]: veth41cfbbb: Link UP Oct 27 13:24:06.043185 kernel: docker0: port 5(vethf454c70) entered blocking state Oct 27 13:24:06.043283 kernel: docker0: port 5(vethf454c70) entered disabled state Oct 27 13:24:06.046635 kernel: vethf454c70: entered allmulticast mode Oct 27 13:24:06.049382 kernel: vethf454c70: entered promiscuous mode Oct 27 13:24:06.034000 audit: ANOM_PROMISCUOUS dev=vethf454c70 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.034000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1f0c810 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.056855 kernel: eth0: renamed from veth229c97b Oct 27 13:24:06.062000 audit[3528]: NETFILTER_CFG table=raw:47 family=2 entries=1 op=nft_register_rule pid=3528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.062000 audit[3528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd9d8e920 a2=0 a3=0 items=0 ppid=2508 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.062000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.068811 kernel: docker0: port 4(veth41cfbbb) entered blocking state Oct 27 13:24:06.068835 kernel: docker0: port 4(veth41cfbbb) entered forwarding state Oct 27 13:24:06.069820 systemd-networkd[1681]: veth41cfbbb: Gained carrier Oct 27 13:24:06.071330 systemd-networkd[1681]: vethf454c70: Link UP Oct 27 13:24:06.096300 kernel: docker0: port 6(veth63420bd) entered blocking state Oct 27 13:24:06.096384 kernel: docker0: port 6(veth63420bd) entered disabled state Oct 27 13:24:06.101232 kernel: veth63420bd: entered allmulticast mode Oct 27 13:24:06.104867 kernel: veth63420bd: entered promiscuous mode Oct 27 13:24:06.087000 audit: ANOM_PROMISCUOUS dev=veth63420bd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.087000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332390 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.087000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.113685 kernel: eth0: renamed from veth19592f5 Oct 27 13:24:06.113749 kernel: docker0: port 5(vethf454c70) entered blocking state Oct 27 13:24:06.118107 kernel: docker0: port 5(vethf454c70) entered forwarding state Oct 27 13:24:06.114000 audit[3537]: NETFILTER_CFG table=raw:48 family=2 entries=1 op=nft_register_rule pid=3537 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.114000 audit[3537]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc50cf1e0 a2=0 a3=0 items=0 ppid=2508 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.114000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.118390 systemd-networkd[1681]: vethf454c70: Gained carrier Oct 27 13:24:06.119519 systemd-networkd[1681]: veth63420bd: Link UP Oct 27 13:24:06.149936 kernel: docker0: port 7(vethe4bd01f) entered blocking state Oct 27 13:24:06.149999 kernel: docker0: port 7(vethe4bd01f) entered disabled state Oct 27 13:24:06.153951 kernel: vethe4bd01f: entered allmulticast mode Oct 27 13:24:06.141000 audit: ANOM_PROMISCUOUS dev=vethe4bd01f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.157108 kernel: vethe4bd01f: entered promiscuous mode Oct 27 13:24:06.141000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332ab0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.141000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.164159 kernel: eth0: renamed from veth6801295 Oct 27 13:24:06.172355 kernel: docker0: port 6(veth63420bd) entered blocking state Oct 27 13:24:06.172398 kernel: docker0: port 6(veth63420bd) entered forwarding state Oct 27 13:24:06.163000 audit[3541]: NETFILTER_CFG table=raw:49 family=2 entries=1 op=nft_register_rule pid=3541 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.163000 audit[3541]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffca13b740 a2=0 a3=0 items=0 ppid=2508 pid=3541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.163000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.172567 systemd-networkd[1681]: veth63420bd: Gained carrier Oct 27 13:24:06.173294 systemd-networkd[1681]: vethe4bd01f: Link UP Oct 27 13:24:06.198111 kernel: docker0: port 8(vethd27d903) entered blocking state Oct 27 13:24:06.198203 kernel: docker0: port 8(vethd27d903) entered disabled state Oct 27 13:24:06.201170 kernel: vethd27d903: entered allmulticast mode Oct 27 13:24:06.204411 kernel: vethd27d903: entered promiscuous mode Oct 27 13:24:06.189000 audit: ANOM_PROMISCUOUS dev=vethd27d903 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.189000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1f0d2c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.189000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.205000 audit[3548]: NETFILTER_CFG table=raw:50 family=2 entries=1 op=nft_register_rule pid=3548 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.205000 audit[3548]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffea319740 a2=0 a3=0 items=0 ppid=2508 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.205000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.210118 kernel: eth0: renamed from vethba1aaad Oct 27 13:24:06.210498 systemd-networkd[1681]: vethd27d903: Link UP Oct 27 13:24:06.210688 systemd[1]: docker-02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669.scope: Deactivated successfully. Oct 27 13:24:06.221066 kernel: docker0: port 7(vethe4bd01f) entered blocking state Oct 27 13:24:06.221146 kernel: docker0: port 7(vethe4bd01f) entered forwarding state Oct 27 13:24:06.226043 systemd-networkd[1681]: vethe4bd01f: Gained carrier Oct 27 13:24:06.241068 kernel: docker0: port 9(veth19173c0) entered blocking state Oct 27 13:24:06.241711 kernel: docker0: port 9(veth19173c0) entered disabled state Oct 27 13:24:06.245029 kernel: veth19173c0: entered allmulticast mode Oct 27 13:24:06.249690 kernel: veth19173c0: entered promiscuous mode Oct 27 13:24:06.231000 audit: ANOM_PROMISCUOUS dev=veth19173c0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.231000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333440 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.231000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.255000 audit[3565]: NETFILTER_CFG table=raw:51 family=2 entries=1 op=nft_register_rule pid=3565 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.255000 audit[3565]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff319f9c0 a2=0 a3=0 items=0 ppid=2508 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.255000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.260481 systemd[1]: docker-80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a.scope: Deactivated successfully. Oct 27 13:24:06.267114 kernel: eth0: renamed from vethfd8a19c Oct 27 13:24:06.268247 systemd-networkd[1681]: veth19173c0: Link UP Oct 27 13:24:06.277475 kernel: docker0: port 8(vethd27d903) entered blocking state Oct 27 13:24:06.277522 kernel: docker0: port 8(vethd27d903) entered forwarding state Oct 27 13:24:06.278037 systemd-networkd[1681]: vethd27d903: Gained carrier Oct 27 13:24:06.279807 systemd[1]: docker-30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a.scope: Deactivated successfully. Oct 27 13:24:06.281710 dockerd[2508]: time="2026-10-27T13:24:06.281303891Z" level=info msg="ignoring event" container=02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.283466 containerd[1962]: time="2026-10-27T13:24:06.283433400Z" level=info msg="shim disconnected" id=02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669 namespace=moby Oct 27 13:24:06.283542 containerd[1962]: time="2026-10-27T13:24:06.283481101Z" level=info msg="cleaning up after shim disconnected" id=02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669 namespace=moby Oct 27 13:24:06.283542 containerd[1962]: time="2026-10-27T13:24:06.283495036Z" level=info msg="cleaning up dead shim" id=02b65ef14ce8d961fc2989953b3ee95c8dae23bb6713f99ab82894b35eb8c669 namespace=moby Oct 27 13:24:06.292146 kernel: eth0: renamed from veth482476a Oct 27 13:24:06.308957 kernel: docker0: port 10(veth248430d) entered blocking state Oct 27 13:24:06.309167 kernel: docker0: port 10(veth248430d) entered disabled state Oct 27 13:24:06.312403 kernel: veth248430d: entered allmulticast mode Oct 27 13:24:06.313165 systemd[1]: docker-d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7.scope: Deactivated successfully. Oct 27 13:24:06.315248 containerd[1962]: time="2026-10-27T13:24:06.314276003Z" level=info msg="shim disconnected" id=30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a namespace=moby Oct 27 13:24:06.315248 containerd[1962]: time="2026-10-27T13:24:06.314306633Z" level=info msg="cleaning up after shim disconnected" id=30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a namespace=moby Oct 27 13:24:06.315248 containerd[1962]: time="2026-10-27T13:24:06.314313073Z" level=info msg="cleaning up dead shim" id=30c98e1b23c5914717797baf5a7c78e73821dd2777c82c32cc9059d7da3d599a namespace=moby Oct 27 13:24:06.296000 audit: ANOM_PROMISCUOUS dev=veth248430d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.324839 kernel: veth248430d: entered promiscuous mode Oct 27 13:24:06.324893 kernel: docker0: port 9(veth19173c0) entered blocking state Oct 27 13:24:06.328191 kernel: docker0: port 9(veth19173c0) entered forwarding state Oct 27 13:24:06.296000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333740 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.296000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.332164 dockerd[2508]: time="2026-10-27T13:24:06.331048981Z" level=info msg="ignoring event" container=80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.332241 containerd[1962]: time="2026-10-27T13:24:06.331211115Z" level=info msg="shim disconnected" id=80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a namespace=moby Oct 27 13:24:06.332782 containerd[1962]: time="2026-10-27T13:24:06.331233577Z" level=info msg="cleaning up after shim disconnected" id=80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a namespace=moby Oct 27 13:24:06.332782 containerd[1962]: time="2026-10-27T13:24:06.332357252Z" level=info msg="cleaning up dead shim" id=80afb54861fefed27f4cd6aaa896bd75609741888e0ad7f1d0c45f2f264b324a namespace=moby Oct 27 13:24:06.334357 systemd-networkd[1681]: veth19173c0: Gained carrier Oct 27 13:24:06.344112 kernel: veth183a592: renamed from eth0 Oct 27 13:24:06.343000 audit[3624]: NETFILTER_CFG table=raw:52 family=2 entries=1 op=nft_register_rule pid=3624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.343000 audit[3624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdd9325a0 a2=0 a3=0 items=0 ppid=2508 pid=3624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.343000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E31310000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.348130 kernel: docker0: port 1(veth6060603) entered disabled state Oct 27 13:24:06.349459 systemd-networkd[1681]: veth6060603: Lost carrier Oct 27 13:24:06.354185 systemd-networkd[1681]: veth248430d: Link UP Oct 27 13:24:06.365398 dockerd[2508]: time="2026-10-27T13:24:06.365083315Z" level=info msg="ignoring event" container=d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.365592 containerd[1962]: time="2026-10-27T13:24:06.365565989Z" level=info msg="shim disconnected" id=d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7 namespace=moby Oct 27 13:24:06.365756 containerd[1962]: time="2026-10-27T13:24:06.365738898Z" level=info msg="cleaning up after shim disconnected" id=d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7 namespace=moby Oct 27 13:24:06.365833 containerd[1962]: time="2026-10-27T13:24:06.365818021Z" level=info msg="cleaning up dead shim" id=d22a89ed551e85f87d0c8215e2f21b6f74f39c6cf2400fe2a33b4b9c12d6fcc7 namespace=moby Oct 27 13:24:06.378278 systemd[1]: docker-d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77.scope: Deactivated successfully. Oct 27 13:24:06.389254 kernel: eth0: renamed from veth517f529 Oct 27 13:24:06.391000 audit[3657]: NETFILTER_CFG table=raw:53 family=2 entries=1 op=nft_unregister_rule pid=3657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.391000 audit[3657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe08d9c50 a2=0 a3=0 items=0 ppid=2508 pid=3657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.391000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.397284 systemd-networkd[1681]: vethbdb125d: Lost carrier Oct 27 13:24:06.398135 kernel: docker0: port 3(vethbdb125d) entered disabled state Oct 27 13:24:06.401169 kernel: vethfa52e93: renamed from eth0 Oct 27 13:24:06.401213 kernel: docker0: port 2(vethc61b76f) entered disabled state Oct 27 13:24:06.405377 systemd-networkd[1681]: vethc61b76f: Lost carrier Oct 27 13:24:06.420115 kernel: docker0: port 1(veth6060603) entered disabled state Oct 27 13:24:06.429406 kernel: veth6060603 (unregistering): left allmulticast mode Oct 27 13:24:06.429452 kernel: veth6060603 (unregistering): left promiscuous mode Oct 27 13:24:06.429941 systemd[1]: docker-321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212.scope: Deactivated successfully. Oct 27 13:24:06.405000 audit: ANOM_PROMISCUOUS dev=veth6060603 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.432000 audit[3672]: NETFILTER_CFG table=raw:54 family=2 entries=1 op=nft_unregister_rule pid=3672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.432000 audit[3672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=392 a0=3 a1=ffffe7ca3fc0 a2=0 a3=0 items=0 ppid=2508 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.436425 kernel: docker0: port 1(veth6060603) entered disabled state Oct 27 13:24:06.438397 containerd[1962]: time="2026-10-27T13:24:06.438363172Z" level=info msg="shim disconnected" id=d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77 namespace=moby Oct 27 13:24:06.438397 containerd[1962]: time="2026-10-27T13:24:06.438390098Z" level=info msg="cleaning up after shim disconnected" id=d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77 namespace=moby Oct 27 13:24:06.438397 containerd[1962]: time="2026-10-27T13:24:06.438397377Z" level=info msg="cleaning up dead shim" id=d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77 namespace=moby Oct 27 13:24:06.438619 dockerd[2508]: time="2026-10-27T13:24:06.438579494Z" level=info msg="ignoring event" container=d88107c7af077df2ddf4bd4eddd21a026bfff1b5f948645ba4115ae8db251a77 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.444199 kernel: veth085a1e1: renamed from eth0 Oct 27 13:24:06.405000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c24e20e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.405000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.450589 systemd[1]: run-docker-netns-6354a9b6b6e4.mount: Deactivated successfully. Oct 27 13:24:06.452604 systemd-networkd[1681]: veth6060603: Link DOWN Oct 27 13:24:06.460395 kernel: docker0: port 10(veth248430d) entered blocking state Oct 27 13:24:06.460426 kernel: docker0: port 10(veth248430d) entered forwarding state Oct 27 13:24:06.466528 kernel: docker0: port 3(vethbdb125d) entered disabled state Oct 27 13:24:06.466242 systemd[1]: var-lib-docker-overlay2-36c8f6696e9e9e09f6944e39cd4605f4fef8f4fed247f7759f7070684949193b-merged.mount: Deactivated successfully. Oct 27 13:24:06.475793 kernel: vethbdb125d (unregistering): left allmulticast mode Oct 27 13:24:06.475886 kernel: vethbdb125d (unregistering): left promiscuous mode Oct 27 13:24:06.460000 audit: ANOM_PROMISCUOUS dev=vethbdb125d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.479678 kernel: docker0: port 3(vethbdb125d) entered disabled state Oct 27 13:24:06.485867 systemd-networkd[1681]: veth248430d: Gained carrier Oct 27 13:24:06.486000 audit[3695]: NETFILTER_CFG table=raw:55 family=2 entries=1 op=nft_unregister_rule pid=3695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.486132 systemd-networkd[1681]: vethbdb125d: Link DOWN Oct 27 13:24:06.486000 audit[3695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf369550 a2=0 a3=0 items=0 ppid=2508 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.489421 kernel: veth229c97b: renamed from eth0 Oct 27 13:24:06.493985 kernel: docker0: port 4(veth41cfbbb) entered disabled state Oct 27 13:24:06.493449 systemd-networkd[1681]: veth41cfbbb: Lost carrier Oct 27 13:24:06.497444 systemd[1]: docker-75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8.scope: Deactivated successfully. Oct 27 13:24:06.460000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c24e25a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.460000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.500477 systemd-networkd[1681]: vethc61b76f: Link DOWN Oct 27 13:24:06.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-4119-10.0.0.24:22-109.160.32.131:58074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.501508 systemd[1]: Started sshd@29-4119-10.0.0.24:22-109.160.32.131:58074.service - OpenSSH per-connection server daemon (109.160.32.131:58074). Oct 27 13:24:06.510252 kernel: docker0: port 2(vethc61b76f) entered disabled state Oct 27 13:24:06.512117 dockerd[2508]: time="2026-10-27T13:24:06.510885916Z" level=info msg="ignoring event" container=321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.512195 containerd[1962]: time="2026-10-27T13:24:06.511244110Z" level=info msg="shim disconnected" id=321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212 namespace=moby Oct 27 13:24:06.512195 containerd[1962]: time="2026-10-27T13:24:06.511271996Z" level=info msg="cleaning up after shim disconnected" id=321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212 namespace=moby Oct 27 13:24:06.512195 containerd[1962]: time="2026-10-27T13:24:06.511277683Z" level=info msg="cleaning up dead shim" id=321d14e1ecdeabb66b5b9de62f24e475522d0de3ce8296cade9d808fd0e3a212 namespace=moby Oct 27 13:24:06.522131 kernel: vethc61b76f (unregistering): left allmulticast mode Oct 27 13:24:06.522218 kernel: vethc61b76f (unregistering): left promiscuous mode Oct 27 13:24:06.498000 audit: ANOM_PROMISCUOUS dev=vethc61b76f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.528363 kernel: docker0: port 2(vethc61b76f) entered disabled state Oct 27 13:24:06.530514 containerd[1962]: time="2026-10-27T13:24:06.530479127Z" level=info msg="shim disconnected" id=75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8 namespace=moby Oct 27 13:24:06.530514 containerd[1962]: time="2026-10-27T13:24:06.530512093Z" level=info msg="cleaning up after shim disconnected" id=75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8 namespace=moby Oct 27 13:24:06.530514 containerd[1962]: time="2026-10-27T13:24:06.530518333Z" level=info msg="cleaning up dead shim" id=75bbda7efc82c61f36a69de7755634eec882867115d25f4d2a14e1f67a2349c8 namespace=moby Oct 27 13:24:06.498000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c2536600 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.498000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.540199 systemd[1]: run-docker-netns-7ac7dd7e95e7.mount: Deactivated successfully. Oct 27 13:24:06.542000 audit: BPF prog-id=53 op=UNLOAD Oct 27 13:24:06.542000 audit: BPF prog-id=59 op=UNLOAD Oct 27 13:24:06.544616 systemd[1]: docker-cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018.scope: Deactivated successfully. Oct 27 13:24:06.557117 kernel: veth19592f5: renamed from eth0 Oct 27 13:24:06.557205 kernel: docker0: port 5(vethf454c70) entered disabled state Oct 27 13:24:06.560403 systemd-networkd[1681]: vethf454c70: Lost carrier Oct 27 13:24:06.561868 systemd[1]: var-lib-docker-overlay2-bcd86b18a217bc096d1e54400869a1df274d38c233f71fda21b5250eaa4b8100-merged.mount: Deactivated successfully. Oct 27 13:24:06.574000 audit[3740]: NETFILTER_CFG table=raw:56 family=2 entries=1 op=nft_unregister_rule pid=3740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.574000 audit[3740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcfde25a0 a2=0 a3=0 items=0 ppid=2508 pid=3740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.581594 systemd-networkd[1681]: veth41cfbbb: Link DOWN Oct 27 13:24:06.585000 audit: BPF prog-id=63 op=UNLOAD Oct 27 13:24:06.585000 audit: BPF prog-id=67 op=UNLOAD Oct 27 13:24:06.586356 kernel: docker0: port 4(veth41cfbbb) entered disabled state Oct 27 13:24:06.595011 kernel: veth41cfbbb (unregistering): left allmulticast mode Oct 27 13:24:06.595175 kernel: veth41cfbbb (unregistering): left promiscuous mode Oct 27 13:24:06.595581 containerd[1962]: time="2026-10-27T13:24:06.595418988Z" level=info msg="shim disconnected" id=cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018 namespace=moby Oct 27 13:24:06.595581 containerd[1962]: time="2026-10-27T13:24:06.595560268Z" level=info msg="cleaning up after shim disconnected" id=cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018 namespace=moby Oct 27 13:24:06.580000 audit: ANOM_PROMISCUOUS dev=veth41cfbbb prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.595992 dockerd[2508]: time="2026-10-27T13:24:06.595534061Z" level=info msg="ignoring event" container=cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.596373 containerd[1962]: time="2026-10-27T13:24:06.595569411Z" level=info msg="cleaning up dead shim" id=cd3dee70249079637eac259b7946e7d9e466931fc48e44e707b86f7dba8e3018 namespace=moby Oct 27 13:24:06.599334 kernel: docker0: port 4(veth41cfbbb) entered disabled state Oct 27 13:24:06.580000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c24e2bc0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.580000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.612000 audit: BPF prog-id=55 op=UNLOAD Oct 27 13:24:06.612000 audit: BPF prog-id=62 op=UNLOAD Oct 27 13:24:06.616082 systemd[1]: docker-01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4.scope: Deactivated successfully. Oct 27 13:24:06.629711 containerd[1962]: time="2026-10-27T13:24:06.629661573Z" level=info msg="shim disconnected" id=01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4 namespace=moby Oct 27 13:24:06.629711 containerd[1962]: time="2026-10-27T13:24:06.629693907Z" level=info msg="cleaning up after shim disconnected" id=01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4 namespace=moby Oct 27 13:24:06.629711 containerd[1962]: time="2026-10-27T13:24:06.629700291Z" level=info msg="cleaning up dead shim" id=01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4 namespace=moby Oct 27 13:24:06.631525 dockerd[2508]: time="2026-10-27T13:24:06.630305661Z" level=info msg="ignoring event" container=01d2f383bb82b964d1ab3aa9ae3cf9cf43c636c420773e4c9a2524a83e2237e4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.636811 systemd-networkd[1681]: veth63420bd: Lost carrier Oct 27 13:24:06.637404 kernel: docker0: port 6(veth63420bd) entered disabled state Oct 27 13:24:06.642124 kernel: veth6801295: renamed from eth0 Oct 27 13:24:06.658000 audit: BPF prog-id=68 op=UNLOAD Oct 27 13:24:06.658000 audit: BPF prog-id=72 op=UNLOAD Oct 27 13:24:06.679000 audit[3782]: NETFILTER_CFG table=raw:57 family=2 entries=1 op=nft_unregister_rule pid=3782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.679000 audit[3782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=392 a0=3 a1=ffffd42290f0 a2=0 a3=0 items=0 ppid=2508 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.679000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.687489 systemd-networkd[1681]: veth63420bd: Link DOWN Oct 27 13:24:06.691972 kernel: docker0: port 6(veth63420bd) entered disabled state Oct 27 13:24:06.691000 audit[3784]: NETFILTER_CFG table=raw:58 family=2 entries=1 op=nft_unregister_rule pid=3784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.691000 audit[3784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcde8e280 a2=0 a3=0 items=0 ppid=2508 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.691000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.707559 kernel: veth63420bd (unregistering): left allmulticast mode Oct 27 13:24:06.707622 kernel: veth63420bd (unregistering): left promiscuous mode Oct 27 13:24:06.685000 audit: ANOM_PROMISCUOUS dev=veth63420bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.711011 kernel: docker0: port 6(veth63420bd) entered disabled state Oct 27 13:24:06.716111 kernel: veth482476a: renamed from eth0 Oct 27 13:24:06.721123 kernel: docker0: port 8(vethd27d903) entered disabled state Oct 27 13:24:06.685000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c24e3a00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.685000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.721403 systemd-networkd[1681]: vethd27d903: Lost carrier Oct 27 13:24:06.725926 systemd-networkd[1681]: veth19173c0: Lost carrier Oct 27 13:24:06.726132 kernel: docker0: port 9(veth19173c0) entered disabled state Oct 27 13:24:06.730411 systemd-networkd[1681]: vethe4bd01f: Lost carrier Oct 27 13:24:06.733315 kernel: docker0: port 7(vethe4bd01f) entered disabled state Oct 27 13:24:06.733375 kernel: vethfd8a19c: renamed from eth0 Oct 27 13:24:06.749123 kernel: vethba1aaad: renamed from eth0 Oct 27 13:24:06.755224 kernel: docker0: port 5(vethf454c70) entered disabled state Oct 27 13:24:06.765443 kernel: vethf454c70 (unregistering): left allmulticast mode Oct 27 13:24:06.765528 kernel: vethf454c70 (unregistering): left promiscuous mode Oct 27 13:24:06.747000 audit: ANOM_PROMISCUOUS dev=vethf454c70 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.765000 audit[3794]: NETFILTER_CFG table=raw:59 family=2 entries=1 op=nft_unregister_rule pid=3794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.765000 audit[3794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=392 a0=3 a1=ffffe7679340 a2=0 a3=0 items=0 ppid=2508 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.765000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.770313 kernel: docker0: port 5(vethf454c70) entered disabled state Oct 27 13:24:06.774000 audit[3796]: NETFILTER_CFG table=raw:60 family=2 entries=1 op=nft_unregister_rule pid=3796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.774000 audit[3796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=392 a0=3 a1=ffffc34e2350 a2=0 a3=0 items=0 ppid=2508 pid=3796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.774000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.747000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c2537860 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.747000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.790370 kernel: docker0: port 9(veth19173c0) entered disabled state Oct 27 13:24:06.791606 sshd[2979]: Connection closed by 20.31.226.197 port 60682 Oct 27 13:24:06.792180 sshd-session[2930]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:06.801315 kernel: veth19173c0 (unregistering): left allmulticast mode Oct 27 13:24:06.801384 kernel: veth19173c0 (unregistering): left promiscuous mode Oct 27 13:24:06.785000 audit: ANOM_PROMISCUOUS dev=veth19173c0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.805511 kernel: docker0: port 9(veth19173c0) entered disabled state Oct 27 13:24:06.805000 audit[3799]: NETFILTER_CFG table=raw:61 family=2 entries=1 op=nft_unregister_rule pid=3799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.805000 audit[3799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffeccd5980 a2=0 a3=0 items=0 ppid=2508 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.805000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.806000 audit[2930]: AUDIT1106 pid=2930 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.806000 audit[2930]: AUDIT1104 pid=2930 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.808585 systemd-networkd[1681]: vethf454c70: Link DOWN Oct 27 13:24:06.811718 systemd[1]: sshd@23-4113-10.0.0.24:22-20.31.226.197:60682.service: Deactivated successfully. Oct 27 13:24:06.811000 audit: BPF prog-id=77 op=UNLOAD Oct 27 13:24:06.811000 audit: BPF prog-id=81 op=UNLOAD Oct 27 13:24:06.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4113-10.0.0.24:22-20.31.226.197:60682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.813859 systemd-networkd[1681]: veth19173c0: Link DOWN Oct 27 13:24:06.816008 systemd[1]: session-19.scope: Deactivated successfully. Oct 27 13:24:06.785000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1052200 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.785000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.819157 systemd-logind[1931]: Session 19 logged out. Waiting for processes to exit. Oct 27 13:24:06.820139 systemd-logind[1931]: Removed session 19. Oct 27 13:24:06.821681 kernel: docker0: port 7(vethe4bd01f) entered disabled state Oct 27 13:24:06.821717 sshd[2975]: Connection closed by 20.31.226.197 port 60702 Oct 27 13:24:06.821180 systemd-networkd[1681]: vethe4bd01f: Link DOWN Oct 27 13:24:06.822346 sshd-session[2931]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:06.830333 kernel: vethe4bd01f (unregistering): left allmulticast mode Oct 27 13:24:06.830397 kernel: vethe4bd01f (unregistering): left promiscuous mode Oct 27 13:24:06.816000 audit: ANOM_PROMISCUOUS dev=vethe4bd01f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.834371 kernel: docker0: port 7(vethe4bd01f) entered disabled state Oct 27 13:24:06.835446 sshd[2980]: Connection closed by 20.31.226.197 port 60662 Oct 27 13:24:06.834000 audit[2931]: AUDIT1106 pid=2931 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.834000 audit[2931]: AUDIT1104 pid=2931 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.836438 sshd-session[2934]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:06.838018 systemd[1]: sshd@24-4114-10.0.0.24:22-20.31.226.197:60702.service: Deactivated successfully. Oct 27 13:24:06.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4114-10.0.0.24:22-20.31.226.197:60702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.839000 audit[2934]: AUDIT1106 pid=2934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.839000 audit[2934]: AUDIT1104 pid=2934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.840000 audit: BPF prog-id=83 op=UNLOAD Oct 27 13:24:06.840000 audit: BPF prog-id=87 op=UNLOAD Oct 27 13:24:06.842495 systemd[1]: sshd@27-4117-10.0.0.24:22-20.31.226.197:60662.service: Deactivated successfully. Oct 27 13:24:06.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4117-10.0.0.24:22-20.31.226.197:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.816000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c10526a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.816000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.846157 systemd-networkd[1681]: vethd27d903: Link DOWN Oct 27 13:24:06.847221 systemd[1]: session-21.scope: Deactivated successfully. Oct 27 13:24:06.850338 kernel: docker0: port 8(vethd27d903) entered disabled state Oct 27 13:24:06.848048 systemd[1]: session-17.scope: Deactivated successfully. Oct 27 13:24:06.850455 systemd-logind[1931]: Session 17 logged out. Waiting for processes to exit. Oct 27 13:24:06.856360 sshd[2968]: Connection closed by 20.31.226.197 port 60678 Oct 27 13:24:06.856281 sshd-session[2932]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:06.860388 kernel: vethd27d903 (unregistering): left allmulticast mode Oct 27 13:24:06.860496 kernel: vethd27d903 (unregistering): left promiscuous mode Oct 27 13:24:06.860577 systemd-logind[1931]: Removed session 17. Oct 27 13:24:06.844000 audit: ANOM_PROMISCUOUS dev=vethd27d903 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:06.844000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c17740e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.844000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:06.872000 audit: BPF prog-id=88 op=UNLOAD Oct 27 13:24:06.872000 audit: BPF prog-id=98 op=UNLOAD Oct 27 13:24:06.881000 audit[2932]: AUDIT1106 pid=2932 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.881000 audit[2932]: AUDIT1104 pid=2932 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.884028 kernel: docker0: port 8(vethd27d903) entered disabled state Oct 27 13:24:06.864735 systemd-logind[1931]: Session 21 logged out. Waiting for processes to exit. Oct 27 13:24:06.867301 systemd-logind[1931]: Removed session 21. Oct 27 13:24:06.885587 systemd[1]: sshd@25-4115-10.0.0.24:22-20.31.226.197:60678.service: Deactivated successfully. Oct 27 13:24:06.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4115-10.0.0.24:22-20.31.226.197:60678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.888898 systemd[1]: session-14.scope: Deactivated successfully. Oct 27 13:24:06.890266 systemd-logind[1931]: Session 14 logged out. Waiting for processes to exit. Oct 27 13:24:06.891889 systemd-logind[1931]: Removed session 14. Oct 27 13:24:06.894000 audit: BPF prog-id=73 op=UNLOAD Oct 27 13:24:06.894000 audit: BPF prog-id=82 op=UNLOAD Oct 27 13:24:06.906000 audit: BPF prog-id=95 op=UNLOAD Oct 27 13:24:06.906000 audit: BPF prog-id=102 op=UNLOAD Oct 27 13:24:06.905000 systemd[1]: docker-e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8.scope: Deactivated successfully. Oct 27 13:24:06.931134 containerd[1962]: time="2026-10-27T13:24:06.917347082Z" level=info msg="shim disconnected" id=e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8 namespace=moby Oct 27 13:24:06.931134 containerd[1962]: time="2026-10-27T13:24:06.917370360Z" level=info msg="cleaning up after shim disconnected" id=e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8 namespace=moby Oct 27 13:24:06.931134 containerd[1962]: time="2026-10-27T13:24:06.917375480Z" level=info msg="cleaning up dead shim" id=e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8 namespace=moby Oct 27 13:24:06.931261 dockerd[2508]: time="2026-10-27T13:24:06.917456187Z" level=info msg="ignoring event" container=e454de12ea67df0a9e234eff5ff39e9e35e93d40a4a2a6e7b8f4125d9af147e8 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:06.937000 audit[2927]: AUDIT1106 pid=2927 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.939237 sshd[2970]: Connection closed by 20.31.226.197 port 60686 Oct 27 13:24:06.938308 sshd-session[2927]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:06.938000 audit[2927]: AUDIT1104 pid=2927 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:06.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-8-10.0.0.24:22-20.31.226.197:60704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-10.0.0.24:22-20.31.226.197:60686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.944347 systemd[1]: Started sshd@30-8-10.0.0.24:22-20.31.226.197:60704.service - OpenSSH per-connection server daemon (20.31.226.197:60704). Oct 27 13:24:06.944687 systemd[1]: sshd@20-4110-10.0.0.24:22-20.31.226.197:60686.service: Deactivated successfully. Oct 27 13:24:06.946832 systemd[1]: session-13.scope: Deactivated successfully. Oct 27 13:24:06.948445 systemd-logind[1931]: Session 13 logged out. Waiting for processes to exit. Oct 27 13:24:06.951398 systemd-logind[1931]: Removed session 13. Oct 27 13:24:06.967120 kernel: docker0: port 10(veth248430d) entered disabled state Oct 27 13:24:06.967323 systemd-networkd[1681]: veth248430d: Lost carrier Oct 27 13:24:06.971167 kernel: veth517f529: renamed from eth0 Oct 27 13:24:06.985000 audit[3846]: NETFILTER_CFG table=raw:62 family=2 entries=1 op=nft_unregister_rule pid=3846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:06.985000 audit[3846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe8148b50 a2=0 a3=0 items=0 ppid=2508 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.985000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E31310000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:06.991288 systemd[1]: Started sshd@31-9-10.0.0.24:22-20.31.226.197:60716.service - OpenSSH per-connection server daemon (20.31.226.197:60716). Oct 27 13:24:06.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-9-10.0.0.24:22-20.31.226.197:60716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10-10.0.0.24:22-20.31.226.197:60706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:06.992698 systemd[1]: Started sshd@32-10-10.0.0.24:22-20.31.226.197:60706.service - OpenSSH per-connection server daemon (20.31.226.197:60706). Oct 27 13:24:06.993531 systemd-networkd[1681]: veth248430d: Link DOWN Oct 27 13:24:06.998177 kernel: docker0: port 10(veth248430d) entered disabled state Oct 27 13:24:07.006817 kernel: veth248430d (unregistering): left allmulticast mode Oct 27 13:24:07.007024 kernel: veth248430d (unregistering): left promiscuous mode Oct 27 13:24:06.992000 audit: ANOM_PROMISCUOUS dev=veth248430d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:07.010490 kernel: docker0: port 10(veth248430d) entered disabled state Oct 27 13:24:06.992000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053700 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:06.992000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:07.035000 audit: BPF prog-id=89 op=UNLOAD Oct 27 13:24:07.035000 audit: BPF prog-id=93 op=UNLOAD Oct 27 13:24:07.083140 sshd[2982]: Connection closed by 20.31.226.197 port 60660 Oct 27 13:24:07.084260 sshd-session[2933]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:07.083000 audit[2933]: AUDIT1106 pid=2933 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.083000 audit[2933]: AUDIT1104 pid=2933 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.087414 systemd[1]: sshd@26-4116-10.0.0.24:22-20.31.226.197:60660.service: Deactivated successfully. Oct 27 13:24:07.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-4116-10.0.0.24:22-20.31.226.197:60660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.090437 systemd[1]: session-20.scope: Deactivated successfully. Oct 27 13:24:07.091374 sshd[2987]: Connection closed by 20.31.226.197 port 60628 Oct 27 13:24:07.092066 sshd-session[2929]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:07.093010 systemd-logind[1931]: Session 20 logged out. Waiting for processes to exit. Oct 27 13:24:07.095221 systemd-logind[1931]: Removed session 20. Oct 27 13:24:07.095000 audit[2929]: AUDIT1106 pid=2929 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.095000 audit[2929]: AUDIT1104 pid=2929 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.098252 systemd[1]: sshd@22-4112-10.0.0.24:22-20.31.226.197:60628.service: Deactivated successfully. Oct 27 13:24:07.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4112-10.0.0.24:22-20.31.226.197:60628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.100934 systemd[1]: session-18.scope: Deactivated successfully. Oct 27 13:24:07.102185 systemd-logind[1931]: Session 18 logged out. Waiting for processes to exit. Oct 27 13:24:07.103028 systemd-logind[1931]: Removed session 18. Oct 27 13:24:07.116200 sshd[2976]: Connection closed by 20.31.226.197 port 60654 Oct 27 13:24:07.116617 sshd-session[2928]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:07.117000 audit[2928]: AUDIT1106 pid=2928 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.117000 audit[2928]: AUDIT1104 pid=2928 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.119500 systemd[1]: sshd@21-4111-10.0.0.24:22-20.31.226.197:60654.service: Deactivated successfully. Oct 27 13:24:07.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4111-10.0.0.24:22-20.31.226.197:60654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.121076 systemd[1]: session-15.scope: Deactivated successfully. Oct 27 13:24:07.121734 systemd-logind[1931]: Session 15 logged out. Waiting for processes to exit. Oct 27 13:24:07.122887 systemd-logind[1931]: Removed session 15. Oct 27 13:24:07.130721 sshd[2984]: Connection closed by 20.31.226.197 port 60626 Oct 27 13:24:07.131184 sshd-session[2935]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:07.131000 audit[2935]: AUDIT1106 pid=2935 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.131000 audit[2935]: AUDIT1104 pid=2935 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4118-10.0.0.24:22-20.31.226.197:60626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.133740 systemd[1]: sshd@28-4118-10.0.0.24:22-20.31.226.197:60626.service: Deactivated successfully. Oct 27 13:24:07.135356 systemd[1]: session-22.scope: Deactivated successfully. Oct 27 13:24:07.137247 systemd-logind[1931]: Session 22 logged out. Waiting for processes to exit. Oct 27 13:24:07.138422 systemd-logind[1931]: Removed session 22. Oct 27 13:24:07.240088 systemd[1]: run-docker-netns-033e8f72491c.mount: Deactivated successfully. Oct 27 13:24:07.240216 systemd[1]: run-docker-netns-8f0417b432b3.mount: Deactivated successfully. Oct 27 13:24:07.240246 systemd[1]: run-docker-netns-f50cd5bda4cf.mount: Deactivated successfully. Oct 27 13:24:07.240274 systemd[1]: run-docker-netns-33dbebfee932.mount: Deactivated successfully. Oct 27 13:24:07.240298 systemd[1]: run-docker-netns-dbcccaaf3316.mount: Deactivated successfully. Oct 27 13:24:07.240327 systemd[1]: run-docker-netns-9b58c99814a6.mount: Deactivated successfully. Oct 27 13:24:07.240349 systemd[1]: run-docker-netns-1b8d663327f1.mount: Deactivated successfully. Oct 27 13:24:07.240376 systemd[1]: run-docker-netns-699c27721fe2.mount: Deactivated successfully. Oct 27 13:24:07.240407 systemd[1]: var-lib-docker-overlay2-2db8a1ddbeed54aa33257b260cc26c562c42e0c9e195f55f9dc2c5bee96ec0a7-merged.mount: Deactivated successfully. Oct 27 13:24:07.240433 systemd[1]: var-lib-docker-overlay2-6c34f7ea7f412adcf86ba4d9705999a56f65f89254431363e28483d1e0571d4e-merged.mount: Deactivated successfully. Oct 27 13:24:07.240459 systemd[1]: var-lib-docker-overlay2-1fd4ddb04e5a70b10c84971c2c118d2d58efb134b4597d4cd67bc2b1d9fbf3a4-merged.mount: Deactivated successfully. Oct 27 13:24:07.240490 systemd[1]: var-lib-docker-overlay2-f41166a3833584ea77b854a51971e83bb329d1e942e72cdb9e1d4d7e3888bfaa-merged.mount: Deactivated successfully. Oct 27 13:24:07.240519 systemd[1]: var-lib-docker-overlay2-45302b43cc4aa59689ede1ae538b259bc3a398d2d46935814fb174a7074931a6-merged.mount: Deactivated successfully. Oct 27 13:24:07.240545 systemd[1]: var-lib-docker-overlay2-ef9181c3ff2c3f7a29505ebc0c00aef54b1f28e4ae81585e62225f9ef6ba0b9b-merged.mount: Deactivated successfully. Oct 27 13:24:07.240572 systemd[1]: var-lib-docker-overlay2-d114bd456c561163fd8bfbd0cbdbb09246175c05773784417adcdafd5e5f1fe0-merged.mount: Deactivated successfully. Oct 27 13:24:07.240599 systemd[1]: var-lib-docker-overlay2-e20e42e946030596e4c68364c8527305b1f8878c7b3265484dac2091d4cd1584-merged.mount: Deactivated successfully. Oct 27 13:24:07.248121 sshd[2986]: Connection closed by 20.31.226.197 port 60698 Oct 27 13:24:07.249280 sshd-session[2926]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:07.250000 audit[2926]: AUDIT1106 pid=2926 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.250000 audit[2926]: AUDIT1104 pid=2926 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.253474 systemd[1]: sshd@19-4109-10.0.0.24:22-20.31.226.197:60698.service: Deactivated successfully. Oct 27 13:24:07.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-10.0.0.24:22-20.31.226.197:60698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.255225 systemd[1]: session-16.scope: Deactivated successfully. Oct 27 13:24:07.255921 systemd-logind[1931]: Session 16 logged out. Waiting for processes to exit. Oct 27 13:24:07.257087 systemd-logind[1931]: Removed session 16. Oct 27 13:24:07.547225 systemd-networkd[1681]: docker0: Gained IPv6LL Oct 27 13:24:07.641058 sshd[3698]: Connection closed by authenticating user root 109.160.32.131 port 58074 [preauth] Oct 27 13:24:07.641000 audit[3698]: AUDIT1109 pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:07.643155 systemd[1]: sshd@29-4119-10.0.0.24:22-109.160.32.131:58074.service: Deactivated successfully. Oct 27 13:24:07.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-4119-10.0.0.24:22-109.160.32.131:58074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:07.685000 audit[3835]: AUDIT1101 pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.685317 sshd[3835]: Accepted publickey for core from 20.31.226.197 port 60704 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:07.686000 audit[3835]: AUDIT1103 pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.686000 audit[3835]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc16f4f40 a2=3 a3=0 items=0 ppid=1 pid=3835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:07.686000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:07.686846 sshd-session[3835]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:07.691366 systemd-logind[1931]: New session '23' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:07.698356 systemd[1]: Started session-23.scope - Session 23 of User core. Oct 27 13:24:07.700000 audit[3835]: AUDIT1105 pid=3835 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.702000 audit[3872]: AUDIT1103 pid=3872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.756000 audit[3847]: AUDIT1101 pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.756410 sshd[3847]: Accepted publickey for core from 20.31.226.197 port 60716 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:07.756000 audit[3847]: AUDIT1103 pid=3847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.756000 audit[3847]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc6ab1780 a2=3 a3=0 items=0 ppid=1 pid=3847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:07.756000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:07.757631 sshd-session[3847]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:07.762340 systemd-logind[1931]: New session '24' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:07.772249 systemd[1]: Started session-24.scope - Session 24 of User core. Oct 27 13:24:07.774000 audit[3847]: AUDIT1105 pid=3847 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.775000 audit[3874]: AUDIT1103 pid=3874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.783000 audit[3848]: AUDIT1101 pid=3848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.784204 sshd[3848]: Accepted publickey for core from 20.31.226.197 port 60706 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:07.785000 audit[3848]: AUDIT1103 pid=3848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.785000 audit[3848]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff661d4a0 a2=3 a3=0 items=0 ppid=1 pid=3848 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:07.785000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:07.785608 sshd-session[3848]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:07.789078 systemd-logind[1931]: New session '25' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:07.799250 systemd[1]: Started session-25.scope - Session 25 of User core. Oct 27 13:24:07.801000 audit[3848]: AUDIT1105 pid=3848 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.803000 audit[3876]: AUDIT1103 pid=3876 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:07.867306 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:07.985169 systemd[1]: var-lib-docker-overlay2-74a27bc62ae3a539fc4141eebdee96d48253f7033f57028a2bf35b17898c622f\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:08.144343 containerd[1962]: time="2026-10-27T13:24:08.144226993Z" level=info msg="connecting to shim 5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd" address="unix:///run/containerd/s/8a7bde7b968a117e1bd228d5138e31e4ed03e0fe36f39266c4fa5610478f4a11" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:08.155871 containerd[1962]: time="2026-10-27T13:24:08.155812683Z" level=info msg="connecting to shim 25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323" address="unix:///run/containerd/s/974f7421c22f676e5244b7cf4fd0d4d9fe21556d009aeb5aec98550856471586" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:08.165389 systemd[1]: Started docker-5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd.scope - libcontainer container 5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd. Oct 27 13:24:08.181262 systemd[1]: Started docker-25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323.scope - libcontainer container 25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323. Oct 27 13:24:08.183000 audit: BPF prog-id=103 op=LOAD Oct 27 13:24:08.184000 audit: BPF prog-id=104 op=LOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e1ebbb25f90 a2=98 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=104 op=UNLOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=105 op=LOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e1ebbb26268 a2=98 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=106 op=LOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=e1ebbb25fa8 a2=98 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=106 op=UNLOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=105 op=UNLOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.184000 audit: BPF prog-id=107 op=LOAD Oct 27 13:24:08.184000 audit[3919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e1ebbb264b8 a2=98 a3=0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643031313333313466333038313933323635653062326164 Oct 27 13:24:08.194000 audit: BPF prog-id=108 op=LOAD Oct 27 13:24:08.195000 audit: BPF prog-id=109 op=LOAD Oct 27 13:24:08.195000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=16ac32c31f90 a2=98 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.195000 audit: BPF prog-id=109 op=UNLOAD Oct 27 13:24:08.195000 audit[3954]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.195000 audit: BPF prog-id=110 op=LOAD Oct 27 13:24:08.195000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=16ac32c32268 a2=98 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.195000 audit: BPF prog-id=111 op=LOAD Oct 27 13:24:08.195000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=16ac32c31fa8 a2=98 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.196000 audit: BPF prog-id=111 op=UNLOAD Oct 27 13:24:08.196000 audit[3954]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.196000 audit: BPF prog-id=110 op=UNLOAD Oct 27 13:24:08.196000 audit[3954]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.196000 audit: BPF prog-id=112 op=LOAD Oct 27 13:24:08.196000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=16ac32c324b8 a2=98 a3=0 items=0 ppid=3943 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32356132616639306230353530383635636561643738333864 Oct 27 13:24:08.199089 containerd[1962]: time="2026-10-27T13:24:08.199056037Z" level=info msg="connecting to shim 7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b" address="unix:///run/containerd/s/6b724dcc7273fe6391d6328d054de3162dcf34d1fd4b833dc3435f4651cac75a" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:08.220756 kernel: docker0: port 1(veth8c98aa8) entered blocking state Oct 27 13:24:08.220855 kernel: docker0: port 1(veth8c98aa8) entered disabled state Oct 27 13:24:08.224849 kernel: veth8c98aa8: entered allmulticast mode Oct 27 13:24:08.227872 kernel: veth8c98aa8: entered promiscuous mode Oct 27 13:24:08.210000 audit: ANOM_PROMISCUOUS dev=veth8c98aa8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.210000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c144a060 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.231000 audit[4015]: NETFILTER_CFG table=raw:63 family=2 entries=1 op=nft_register_rule pid=4015 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.231000 audit[4015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffeb6e4580 a2=0 a3=0 items=0 ppid=2508 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.231000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.233789 systemd[1]: Started docker-7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b.scope - libcontainer container 7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b. Oct 27 13:24:08.234429 systemd-networkd[1681]: veth8c98aa8: Link UP Oct 27 13:24:08.251155 kernel: docker0: port 2(veth8361dac) entered blocking state Oct 27 13:24:08.251994 kernel: docker0: port 2(veth8361dac) entered disabled state Oct 27 13:24:08.252026 kernel: veth8361dac: entered allmulticast mode Oct 27 13:24:08.257652 kernel: veth8361dac: entered promiscuous mode Oct 27 13:24:08.243000 audit: ANOM_PROMISCUOUS dev=veth8361dac prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.243000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c144ade0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.243000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.264463 kernel: eth0: renamed from veth0165e27 Oct 27 13:24:08.264000 audit[4025]: NETFILTER_CFG table=raw:64 family=2 entries=1 op=nft_register_rule pid=4025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.264000 audit[4025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe98c0b40 a2=0 a3=0 items=0 ppid=2508 pid=4025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.264000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.271937 kernel: docker0: port 1(veth8c98aa8) entered blocking state Oct 27 13:24:08.271957 kernel: docker0: port 1(veth8c98aa8) entered forwarding state Oct 27 13:24:08.273365 systemd-networkd[1681]: veth8c98aa8: Gained carrier Oct 27 13:24:08.273541 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:08.273628 systemd-networkd[1681]: veth8361dac: Link UP Oct 27 13:24:08.273000 audit: BPF prog-id=113 op=LOAD Oct 27 13:24:08.274000 audit: BPF prog-id=114 op=LOAD Oct 27 13:24:08.274000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f775931f90 a2=98 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.274000 audit: BPF prog-id=114 op=UNLOAD Oct 27 13:24:08.274000 audit[4002]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.275000 audit: BPF prog-id=115 op=LOAD Oct 27 13:24:08.275000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f775932268 a2=98 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.275000 audit: BPF prog-id=116 op=LOAD Oct 27 13:24:08.275000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1f775931fa8 a2=98 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.275000 audit: BPF prog-id=116 op=UNLOAD Oct 27 13:24:08.275000 audit[4002]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.275000 audit: BPF prog-id=115 op=UNLOAD Oct 27 13:24:08.275000 audit[4002]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.275000 audit: BPF prog-id=117 op=LOAD Oct 27 13:24:08.275000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f7759324b8 a2=98 a3=0 items=0 ppid=3992 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37646536616638353835373562353032393131323436363735 Oct 27 13:24:08.298420 kernel: docker0: port 3(veth4eb3063) entered blocking state Oct 27 13:24:08.299040 kernel: docker0: port 3(veth4eb3063) entered disabled state Oct 27 13:24:08.299070 kernel: veth4eb3063: entered allmulticast mode Oct 27 13:24:08.304653 kernel: veth4eb3063: entered promiscuous mode Oct 27 13:24:08.291000 audit: ANOM_PROMISCUOUS dev=veth4eb3063 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.291000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e270 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.291000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.310000 audit[4036]: NETFILTER_CFG table=raw:65 family=2 entries=1 op=nft_register_rule pid=4036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.310000 audit[4036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff9afff50 a2=0 a3=0 items=0 ppid=2508 pid=4036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.310000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.311123 kernel: eth0: renamed from veth032e754 Oct 27 13:24:08.311659 systemd-networkd[1681]: veth4eb3063: Link UP Oct 27 13:24:08.319231 kernel: docker0: port 2(veth8361dac) entered blocking state Oct 27 13:24:08.319275 kernel: docker0: port 2(veth8361dac) entered forwarding state Oct 27 13:24:08.319283 systemd-networkd[1681]: veth8361dac: Gained carrier Oct 27 13:24:08.343140 kernel: eth0: renamed from veth5524a53 Oct 27 13:24:08.343246 kernel: docker0: port 3(veth4eb3063) entered blocking state Oct 27 13:24:08.343267 kernel: docker0: port 3(veth4eb3063) entered forwarding state Oct 27 13:24:08.346567 systemd-networkd[1681]: veth4eb3063: Gained carrier Oct 27 13:24:08.523384 systemd[1]: docker-5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd.scope: Deactivated successfully. Oct 27 13:24:08.536353 dockerd[2508]: time="2026-10-27T13:24:08.536296080Z" level=info msg="ignoring event" container=5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:08.536668 containerd[1962]: time="2026-10-27T13:24:08.536358772Z" level=info msg="shim disconnected" id=5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd namespace=moby Oct 27 13:24:08.536668 containerd[1962]: time="2026-10-27T13:24:08.536382499Z" level=info msg="cleaning up after shim disconnected" id=5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd namespace=moby Oct 27 13:24:08.536668 containerd[1962]: time="2026-10-27T13:24:08.536405137Z" level=info msg="cleaning up dead shim" id=5d0113314f308193265e0b2ad557344ff70d3d23265020a38618c88ecaf6d9fd namespace=moby Oct 27 13:24:08.557033 systemd-networkd[1681]: veth8c98aa8: Lost carrier Oct 27 13:24:08.557304 kernel: docker0: port 1(veth8c98aa8) entered disabled state Oct 27 13:24:08.557736 systemd[1]: docker-25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323.scope: Deactivated successfully. Oct 27 13:24:08.561130 kernel: veth0165e27: renamed from eth0 Oct 27 13:24:08.573094 systemd[1]: docker-7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b.scope: Deactivated successfully. Oct 27 13:24:08.574000 audit[4077]: NETFILTER_CFG table=raw:66 family=2 entries=1 op=nft_unregister_rule pid=4077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.574000 audit[4077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3db5c90 a2=0 a3=0 items=0 ppid=2508 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.575782 dockerd[2508]: time="2026-10-27T13:24:08.575748792Z" level=info msg="ignoring event" container=25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:08.576561 containerd[1962]: time="2026-10-27T13:24:08.576239458Z" level=info msg="shim disconnected" id=25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323 namespace=moby Oct 27 13:24:08.576561 containerd[1962]: time="2026-10-27T13:24:08.576521985Z" level=info msg="cleaning up after shim disconnected" id=25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323 namespace=moby Oct 27 13:24:08.576561 containerd[1962]: time="2026-10-27T13:24:08.576545792Z" level=info msg="cleaning up dead shim" id=25a2af90b0550865cead7838d4708ea5cc309475b84e418672201ec1a8c56323 namespace=moby Oct 27 13:24:08.577611 systemd-networkd[1681]: veth8c98aa8: Link DOWN Oct 27 13:24:08.582177 kernel: docker0: port 1(veth8c98aa8) entered disabled state Oct 27 13:24:08.592977 kernel: veth8c98aa8 (unregistering): left allmulticast mode Oct 27 13:24:08.593185 kernel: veth8c98aa8 (unregistering): left promiscuous mode Oct 27 13:24:08.577000 audit: ANOM_PROMISCUOUS dev=veth8c98aa8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.597541 kernel: docker0: port 1(veth8c98aa8) entered disabled state Oct 27 13:24:08.603626 dockerd[2508]: time="2026-10-27T13:24:08.603591680Z" level=info msg="ignoring event" container=7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:08.603868 containerd[1962]: time="2026-10-27T13:24:08.603833481Z" level=info msg="shim disconnected" id=7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b namespace=moby Oct 27 13:24:08.603923 containerd[1962]: time="2026-10-27T13:24:08.603861104Z" level=info msg="cleaning up after shim disconnected" id=7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b namespace=moby Oct 27 13:24:08.603923 containerd[1962]: time="2026-10-27T13:24:08.603887422Z" level=info msg="cleaning up dead shim" id=7de6af858575b502911246675e14e4b1b69a3eff9164ba9e9b4017c00844a59b namespace=moby Oct 27 13:24:08.577000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159baa0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.577000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.608332 systemd-networkd[1681]: veth8361dac: Lost carrier Oct 27 13:24:08.611337 kernel: docker0: port 2(veth8361dac) entered disabled state Oct 27 13:24:08.611395 kernel: veth032e754: renamed from eth0 Oct 27 13:24:08.613708 systemd[1]: run-docker-netns-872efeb9a27a.mount: Deactivated successfully. Oct 27 13:24:08.618800 systemd[1]: var-lib-docker-overlay2-74a27bc62ae3a539fc4141eebdee96d48253f7033f57028a2bf35b17898c622f-merged.mount: Deactivated successfully. Oct 27 13:24:08.630000 audit: BPF prog-id=103 op=UNLOAD Oct 27 13:24:08.630000 audit: BPF prog-id=107 op=UNLOAD Oct 27 13:24:08.646000 audit[4115]: NETFILTER_CFG table=raw:67 family=2 entries=1 op=nft_unregister_rule pid=4115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.646000 audit[4115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc181e850 a2=0 a3=0 items=0 ppid=2508 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.646000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.655520 systemd-networkd[1681]: veth8361dac: Link DOWN Oct 27 13:24:08.659326 kernel: docker0: port 2(veth8361dac) entered disabled state Oct 27 13:24:08.667143 kernel: veth8361dac (unregistering): left allmulticast mode Oct 27 13:24:08.667219 kernel: veth8361dac (unregistering): left promiscuous mode Oct 27 13:24:08.655000 audit: ANOM_PROMISCUOUS dev=veth8361dac prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.670999 kernel: docker0: port 2(veth8361dac) entered disabled state Oct 27 13:24:08.655000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2140 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.655000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.685902 systemd-networkd[1681]: veth4eb3063: Lost carrier Oct 27 13:24:08.686193 kernel: docker0: port 3(veth4eb3063) entered disabled state Oct 27 13:24:08.689110 kernel: veth5524a53: renamed from eth0 Oct 27 13:24:08.693183 systemd[1]: run-docker-netns-54d30c189a45.mount: Deactivated successfully. Oct 27 13:24:08.704000 audit: BPF prog-id=108 op=UNLOAD Oct 27 13:24:08.704000 audit: BPF prog-id=112 op=UNLOAD Oct 27 13:24:08.711000 audit[4118]: NETFILTER_CFG table=raw:68 family=2 entries=1 op=nft_unregister_rule pid=4118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:08.711000 audit[4118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe20de7c0 a2=0 a3=0 items=0 ppid=2508 pid=4118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.711000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:08.715648 systemd-networkd[1681]: veth4eb3063: Link DOWN Oct 27 13:24:08.722596 kernel: docker0: port 3(veth4eb3063) entered disabled state Oct 27 13:24:08.723004 kernel: veth4eb3063 (unregistering): left allmulticast mode Oct 27 13:24:08.723042 kernel: veth4eb3063 (unregistering): left promiscuous mode Oct 27 13:24:08.715000 audit: ANOM_PROMISCUOUS dev=veth4eb3063 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:08.731299 kernel: docker0: port 3(veth4eb3063) entered disabled state Oct 27 13:24:08.715000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2740 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:08.715000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:08.751000 audit: BPF prog-id=113 op=UNLOAD Oct 27 13:24:08.751000 audit: BPF prog-id=117 op=UNLOAD Oct 27 13:24:08.863331 sshd[3872]: Connection closed by 20.31.226.197 port 60704 Oct 27 13:24:08.864514 sshd-session[3835]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:08.864000 audit[3835]: AUDIT1106 pid=3835 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.864000 audit[3835]: AUDIT1104 pid=3835 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.868272 systemd[1]: sshd@30-8-10.0.0.24:22-20.31.226.197:60704.service: Deactivated successfully. Oct 27 13:24:08.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-8-10.0.0.24:22-20.31.226.197:60704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:08.871681 systemd[1]: session-23.scope: Deactivated successfully. Oct 27 13:24:08.873430 systemd-logind[1931]: Session 23 logged out. Waiting for processes to exit. Oct 27 13:24:08.874331 systemd-logind[1931]: Removed session 23. Oct 27 13:24:08.876320 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:08.887978 sshd[3874]: Connection closed by 20.31.226.197 port 60716 Oct 27 13:24:08.888397 sshd-session[3847]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:08.887000 audit[3847]: AUDIT1106 pid=3847 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.888000 audit[3847]: AUDIT1104 pid=3847 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.891460 systemd[1]: session-24.scope: Deactivated successfully. Oct 27 13:24:08.892625 systemd[1]: sshd@31-9-10.0.0.24:22-20.31.226.197:60716.service: Deactivated successfully. Oct 27 13:24:08.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-9-10.0.0.24:22-20.31.226.197:60716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:08.895335 systemd-logind[1931]: Session 24 logged out. Waiting for processes to exit. Oct 27 13:24:08.896525 systemd-logind[1931]: Removed session 24. Oct 27 13:24:08.928122 sshd[3876]: Connection closed by 20.31.226.197 port 60706 Oct 27 13:24:08.928666 sshd-session[3848]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:08.928000 audit[3848]: AUDIT1106 pid=3848 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.928000 audit[3848]: AUDIT1104 pid=3848 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:08.931763 systemd[1]: sshd@32-10-10.0.0.24:22-20.31.226.197:60706.service: Deactivated successfully. Oct 27 13:24:08.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10-10.0.0.24:22-20.31.226.197:60706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:08.933880 systemd[1]: session-25.scope: Deactivated successfully. Oct 27 13:24:08.935180 systemd-logind[1931]: Session 25 logged out. Waiting for processes to exit. Oct 27 13:24:08.936788 systemd-logind[1931]: Removed session 25. Oct 27 13:24:09.067264 systemd[1]: Started sshd@33-11-10.0.0.24:22-20.31.226.197:60724.service - OpenSSH per-connection server daemon (20.31.226.197:60724). Oct 27 13:24:09.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-11-10.0.0.24:22-20.31.226.197:60724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:09.239937 systemd[1]: run-docker-netns-297d6d99d537.mount: Deactivated successfully. Oct 27 13:24:09.240032 systemd[1]: var-lib-docker-overlay2-68746e2c8da053f296c74fcbf6f56b0f8e72408f3c65cc79589a999e711b9da6-merged.mount: Deactivated successfully. Oct 27 13:24:09.240068 systemd[1]: var-lib-docker-overlay2-ac58e2dea6c6fc6836a7df5b9748b250e3d4e7e42d9d8629a854af504ba35198-merged.mount: Deactivated successfully. Oct 27 13:24:09.785000 audit[4130]: AUDIT1101 pid=4130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:09.786504 sshd[4130]: Accepted publickey for core from 20.31.226.197 port 60724 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:09.786000 audit[4130]: AUDIT1103 pid=4130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:09.786000 audit[4130]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff195eda0 a2=3 a3=0 items=0 ppid=1 pid=4130 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:09.786000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:09.787952 sshd-session[4130]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:09.792058 systemd-logind[1931]: New session '26' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:09.798239 systemd[1]: Started session-26.scope - Session 26 of User core. Oct 27 13:24:09.799000 audit[4130]: AUDIT1105 pid=4130 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:09.800000 audit[4134]: AUDIT1103 pid=4134 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:10.067000 audit[4139]: AUDIT1101 pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.077392 kernel: kauditd_printk_skb: 602 callbacks suppressed Oct 27 13:24:10.068398 sudo[4139]: core : PWD=/tmp/tmp.TYFA3kI9bj ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sh /usr/bin/ping Oct 27 13:24:10.077767 kernel: audit: type=1101 audit(1793107450.067:575): pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.068620 sudo[4139]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:10.067000 audit[4139]: AUDIT1110 pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.097724 kernel: audit: type=1110 audit(1793107450.067:576): pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.067000 audit[4139]: AUDIT1105 pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.112125 kernel: audit: type=1105 audit(1793107450.067:577): pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.121000 sudo[4139]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:10.119000 audit[4139]: AUDIT1106 pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.120000 audit[4139]: AUDIT1104 pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.141765 sudo[4152]: core : PWD=/tmp/tmp.TYFA3kI9bj ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sh /usr/bin/ping /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libreadline.so.8 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Oct 27 13:24:10.141994 sudo[4152]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:10.147596 kernel: audit: type=1106 audit(1793107450.119:578): pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.147669 kernel: audit: type=1104 audit(1793107450.120:579): pid=4139 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.140000 audit[4152]: AUDIT1101 pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.161789 kernel: audit: type=1101 audit(1793107450.140:580): pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.140000 audit[4152]: AUDIT1110 pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.175405 kernel: audit: type=1110 audit(1793107450.140:581): pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.140000 audit[4152]: AUDIT1105 pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.189932 kernel: audit: type=1105 audit(1793107450.140:582): pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.236567 sudo[4152]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:10.235000 audit[4152]: AUDIT1106 pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.242789 sudo[4135]: core : PWD=/tmp/tmp.TYFA3kI9bj ; USER=root ; COMMAND=/usr/sbin/docker build -t ping . Oct 27 13:24:10.243010 sudo[4135]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:24:10.235000 audit[4152]: AUDIT1104 pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.265577 kernel: audit: type=1106 audit(1793107450.235:583): pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.265654 kernel: audit: type=1104 audit(1793107450.235:584): pid=4152 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.241000 audit[4135]: AUDIT1101 pid=4135 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.241000 audit[4135]: AUDIT1110 pid=4135 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.241000 audit[4135]: AUDIT1105 pid=4135 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.689000 audit[4135]: AUDIT1106 pid=4135 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.690214 sudo[4135]: pam_unix(sudo:session): session closed for user root Oct 27 13:24:10.689000 audit[4135]: AUDIT1104 pid=4135 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.827219 sshd[4134]: Connection closed by 20.31.226.197 port 60724 Oct 27 13:24:10.828292 sshd-session[4130]: pam_unix(sshd:session): session closed for user core Oct 27 13:24:10.827000 audit[4130]: AUDIT1106 pid=4130 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:10.827000 audit[4130]: AUDIT1104 pid=4130 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:10.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-11-10.0.0.24:22-20.31.226.197:60724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.830499 systemd[1]: sshd@33-11-10.0.0.24:22-20.31.226.197:60724.service: Deactivated successfully. Oct 27 13:24:10.833001 systemd[1]: session-26.scope: Deactivated successfully. Oct 27 13:24:10.835031 systemd-logind[1931]: Session 26 logged out. Waiting for processes to exit. Oct 27 13:24:10.836172 systemd-logind[1931]: Removed session 26. Oct 27 13:24:10.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-4120-10.0.0.24:22-20.31.226.197:45258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:10.974267 systemd[1]: Started sshd@34-4120-10.0.0.24:22-20.31.226.197:45258.service - OpenSSH per-connection server daemon (20.31.226.197:45258). Oct 27 13:24:11.375418 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount2096770174.mount: Deactivated successfully. Oct 27 13:24:11.691000 audit[4197]: AUDIT1101 pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:11.692624 sshd[4197]: Accepted publickey for core from 20.31.226.197 port 45258 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:24:11.692000 audit[4197]: AUDIT1103 pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:11.692000 audit[4197]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff4db3210 a2=3 a3=0 items=0 ppid=1 pid=4197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:11.692000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:24:11.694240 sshd-session[4197]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:24:11.699194 systemd-logind[1931]: New session '27' of user 'core' with class 'user' and type 'tty'. Oct 27 13:24:11.708260 systemd[1]: Started session-27.scope - Session 27 of User core. Oct 27 13:24:11.709000 audit[4197]: AUDIT1105 pid=4197 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:11.711000 audit[4201]: AUDIT1103 pid=4201 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:24:12.026865 systemd[1]: var-lib-docker-overlay2-9b9670861ed96bf04536b886a3a171730f3e6a281a0d669f40fdd6be560492fd\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:12.190280 containerd[1962]: time="2026-10-27T13:24:12.190238196Z" level=info msg="connecting to shim d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb" address="unix:///run/containerd/s/5ea97967d33be20cff81be71bcda7f8136dd1810d5c33e172675de23d6aba7ba" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:12.210253 systemd[1]: Started docker-d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb.scope - libcontainer container d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb. Oct 27 13:24:12.217000 audit: BPF prog-id=118 op=LOAD Oct 27 13:24:12.218000 audit: BPF prog-id=119 op=LOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=620d5960df90 a2=98 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=119 op=UNLOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=120 op=LOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=620d5960e268 a2=98 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=121 op=LOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=620d5960dfa8 a2=98 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=121 op=UNLOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=120 op=UNLOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.218000 audit: BPF prog-id=122 op=LOAD Oct 27 13:24:12.218000 audit[4229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=620d5960e4b8 a2=98 a3=0 items=0 ppid=4218 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373432383363646237643132643765386539326233653061 Oct 27 13:24:12.243028 kernel: docker0: port 1(veth336d5d0) entered blocking state Oct 27 13:24:12.246147 kernel: docker0: port 1(veth336d5d0) entered disabled state Oct 27 13:24:12.246187 kernel: veth336d5d0: entered allmulticast mode Oct 27 13:24:12.249277 kernel: veth336d5d0: entered promiscuous mode Oct 27 13:24:12.232000 audit: ANOM_PROMISCUOUS dev=veth336d5d0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:12.232000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c14739e0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.232000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:12.250000 audit[4253]: NETFILTER_CFG table=raw:69 family=2 entries=1 op=nft_register_rule pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:12.250000 audit[4253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdf9c9a10 a2=0 a3=0 items=0 ppid=2508 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:12.250000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:12.252300 systemd-networkd[1681]: veth336d5d0: Link UP Oct 27 13:24:12.266113 kernel: eth0: renamed from veth9b5e560 Oct 27 13:24:12.266204 kernel: docker0: port 1(veth336d5d0) entered blocking state Oct 27 13:24:12.272759 kernel: docker0: port 1(veth336d5d0) entered forwarding state Oct 27 13:24:12.273081 systemd-networkd[1681]: veth336d5d0: Gained carrier Oct 27 13:24:12.273414 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:12.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4121-10.0.0.24:22-109.160.32.131:33336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:12.538183 systemd[1]: Started sshd@35-4121-10.0.0.24:22-109.160.32.131:33336.service - OpenSSH per-connection server daemon (109.160.32.131:33336). Oct 27 13:24:13.297509 systemd[1]: docker-d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb.scope: Deactivated successfully. Oct 27 13:24:13.308544 dockerd[2508]: time="2026-10-27T13:24:13.308486409Z" level=info msg="ignoring event" container=d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:13.308935 containerd[1962]: time="2026-10-27T13:24:13.308662727Z" level=info msg="shim disconnected" id=d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb namespace=moby Oct 27 13:24:13.308935 containerd[1962]: time="2026-10-27T13:24:13.308689541Z" level=info msg="cleaning up after shim disconnected" id=d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb namespace=moby Oct 27 13:24:13.308935 containerd[1962]: time="2026-10-27T13:24:13.308695709Z" level=info msg="cleaning up dead shim" id=d74283cdb7d12d7e8e92b3e0aaf237488907070b2e94728e0314c7bde7e3d4bb namespace=moby Oct 27 13:24:13.329134 kernel: docker0: port 1(veth336d5d0) entered disabled state Oct 27 13:24:13.328252 systemd-networkd[1681]: veth336d5d0: Lost carrier Oct 27 13:24:13.329442 kernel: veth9b5e560: renamed from eth0 Oct 27 13:24:13.343000 audit[4289]: NETFILTER_CFG table=raw:70 family=2 entries=1 op=nft_unregister_rule pid=4289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:13.343000 audit[4289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc0f21100 a2=0 a3=0 items=0 ppid=2508 pid=4289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.343000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:13.349579 systemd-networkd[1681]: veth336d5d0: Link DOWN Oct 27 13:24:13.357895 kernel: docker0: port 1(veth336d5d0) entered disabled state Oct 27 13:24:13.357962 kernel: veth336d5d0 (unregistering): left allmulticast mode Oct 27 13:24:13.361413 kernel: veth336d5d0 (unregistering): left promiscuous mode Oct 27 13:24:13.348000 audit: ANOM_PROMISCUOUS dev=veth336d5d0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:13.365478 kernel: docker0: port 1(veth336d5d0) entered disabled state Oct 27 13:24:13.348000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1e00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.348000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:13.378056 systemd[1]: run-docker-netns-a207b109f78a.mount: Deactivated successfully. Oct 27 13:24:13.381437 systemd[1]: var-lib-docker-overlay2-9b9670861ed96bf04536b886a3a171730f3e6a281a0d669f40fdd6be560492fd-merged.mount: Deactivated successfully. Oct 27 13:24:13.389000 audit: BPF prog-id=118 op=UNLOAD Oct 27 13:24:13.389000 audit: BPF prog-id=122 op=UNLOAD Oct 27 13:24:13.486079 systemd[1]: var-lib-docker-overlay2-9997c821079644acd5a7734accf806a75105d05427a74bf3b0a388437e574f75\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:13.557717 containerd[1962]: time="2026-10-27T13:24:13.557526239Z" level=info msg="connecting to shim 4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100" address="unix:///run/containerd/s/ac6280bb272d01c9c8484ad787c3cf94f8da7258b22f11cbed78d1bfd68a0e94" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:13.577275 systemd[1]: Started docker-4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100.scope - libcontainer container 4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100. Oct 27 13:24:13.584000 audit: BPF prog-id=123 op=LOAD Oct 27 13:24:13.585000 audit: BPF prog-id=124 op=LOAD Oct 27 13:24:13.585000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14387b11bf90 a2=98 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.585000 audit: BPF prog-id=124 op=UNLOAD Oct 27 13:24:13.585000 audit[4319]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.585000 audit: BPF prog-id=125 op=LOAD Oct 27 13:24:13.585000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14387b11c268 a2=98 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.586000 audit: BPF prog-id=126 op=LOAD Oct 27 13:24:13.586000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=14387b11bfa8 a2=98 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.586000 audit: BPF prog-id=126 op=UNLOAD Oct 27 13:24:13.586000 audit[4319]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.586000 audit: BPF prog-id=125 op=UNLOAD Oct 27 13:24:13.586000 audit[4319]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.586000 audit: BPF prog-id=127 op=LOAD Oct 27 13:24:13.586000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14387b11c4b8 a2=98 a3=0 items=0 ppid=4307 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663833636239393037303432363536646535343831346563 Oct 27 13:24:13.597676 sshd[4265]: Connection closed by authenticating user root 109.160.32.131 port 33336 [preauth] Oct 27 13:24:13.597000 audit[4265]: AUDIT1109 pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:13.601282 systemd[1]: sshd@35-4121-10.0.0.24:22-109.160.32.131:33336.service: Deactivated successfully. Oct 27 13:24:13.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4121-10.0.0.24:22-109.160.32.131:33336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:13.605345 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:13.612883 kernel: docker0: port 1(veth27ab69e) entered blocking state Oct 27 13:24:13.612957 kernel: docker0: port 1(veth27ab69e) entered disabled state Oct 27 13:24:13.615678 kernel: veth27ab69e: entered allmulticast mode Oct 27 13:24:13.618495 kernel: veth27ab69e: entered promiscuous mode Oct 27 13:24:13.604000 audit: ANOM_PROMISCUOUS dev=veth27ab69e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:13.604000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe9440 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:13.619000 audit[4345]: NETFILTER_CFG table=raw:71 family=2 entries=1 op=nft_register_rule pid=4345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:13.619000 audit[4345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe33c2e90 a2=0 a3=0 items=0 ppid=2508 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:13.619000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:13.621649 systemd-networkd[1681]: veth27ab69e: Link UP Oct 27 13:24:13.638145 kernel: eth0: renamed from vethc423fee Oct 27 13:24:13.644927 kernel: docker0: port 1(veth27ab69e) entered blocking state Oct 27 13:24:13.645002 kernel: docker0: port 1(veth27ab69e) entered forwarding state Oct 27 13:24:13.645232 systemd-networkd[1681]: veth27ab69e: Gained carrier Oct 27 13:24:13.645541 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:14.668749 systemd[1]: docker-4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100.scope: Deactivated successfully. Oct 27 13:24:14.681705 dockerd[2508]: time="2026-10-27T13:24:14.681655496Z" level=info msg="ignoring event" container=4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:14.682349 containerd[1962]: time="2026-10-27T13:24:14.682207494Z" level=info msg="shim disconnected" id=4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100 namespace=moby Oct 27 13:24:14.682349 containerd[1962]: time="2026-10-27T13:24:14.682237988Z" level=info msg="cleaning up after shim disconnected" id=4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100 namespace=moby Oct 27 13:24:14.682349 containerd[1962]: time="2026-10-27T13:24:14.682243652Z" level=info msg="cleaning up dead shim" id=4f83cb9907042656de54814ecdcadf508aa52182eb65affd0767f3508fea9100 namespace=moby Oct 27 13:24:14.702361 systemd-networkd[1681]: veth27ab69e: Lost carrier Oct 27 13:24:14.705113 kernel: docker0: port 1(veth27ab69e) entered disabled state Oct 27 13:24:14.705181 kernel: vethc423fee: renamed from eth0 Oct 27 13:24:14.719000 audit[4375]: NETFILTER_CFG table=raw:72 family=2 entries=1 op=nft_unregister_rule pid=4375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:14.719000 audit[4375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffd278c20 a2=0 a3=0 items=0 ppid=2508 pid=4375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.719000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:14.722540 systemd-networkd[1681]: veth27ab69e: Link DOWN Oct 27 13:24:14.726121 kernel: docker0: port 1(veth27ab69e) entered disabled state Oct 27 13:24:14.733564 kernel: veth27ab69e (unregistering): left allmulticast mode Oct 27 13:24:14.733631 kernel: veth27ab69e (unregistering): left promiscuous mode Oct 27 13:24:14.734157 kernel: docker0: port 1(veth27ab69e) entered disabled state Oct 27 13:24:14.721000 audit: ANOM_PROMISCUOUS dev=veth27ab69e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:14.721000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ceb00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.721000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:14.745520 systemd[1]: run-docker-netns-51ac350ae684.mount: Deactivated successfully. Oct 27 13:24:14.748586 systemd[1]: var-lib-docker-overlay2-9997c821079644acd5a7734accf806a75105d05427a74bf3b0a388437e574f75-merged.mount: Deactivated successfully. Oct 27 13:24:14.759000 audit: BPF prog-id=123 op=UNLOAD Oct 27 13:24:14.759000 audit: BPF prog-id=127 op=UNLOAD Oct 27 13:24:14.888565 containerd[1962]: time="2026-10-27T13:24:14.888522186Z" level=info msg="connecting to shim ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f" address="unix:///run/containerd/s/9c1127035d91345dfde78cb2177fd2145192529802857f7bc72f02c83f8a0a8c" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:14.908266 systemd[1]: Started docker-ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f.scope - libcontainer container ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f. Oct 27 13:24:14.915000 audit: BPF prog-id=128 op=LOAD Oct 27 13:24:14.915000 audit: BPF prog-id=129 op=LOAD Oct 27 13:24:14.915000 audit[4404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5706b3331f90 a2=98 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.915000 audit: BPF prog-id=129 op=UNLOAD Oct 27 13:24:14.915000 audit[4404]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.916000 audit: BPF prog-id=130 op=LOAD Oct 27 13:24:14.916000 audit[4404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5706b3332268 a2=98 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.916000 audit: BPF prog-id=131 op=LOAD Oct 27 13:24:14.916000 audit[4404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5706b3331fa8 a2=98 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.916000 audit: BPF prog-id=131 op=UNLOAD Oct 27 13:24:14.916000 audit[4404]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.916000 audit: BPF prog-id=130 op=UNLOAD Oct 27 13:24:14.916000 audit[4404]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.916000 audit: BPF prog-id=132 op=LOAD Oct 27 13:24:14.916000 audit[4404]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5706b33324b8 a2=98 a3=0 items=0 ppid=4393 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653562393239396663383637326564303134373832613364 Oct 27 13:24:14.935953 kernel: docker0: port 1(vethec695cd) entered blocking state Oct 27 13:24:14.936016 kernel: docker0: port 1(vethec695cd) entered disabled state Oct 27 13:24:14.939026 kernel: vethec695cd: entered allmulticast mode Oct 27 13:24:14.941875 kernel: vethec695cd: entered promiscuous mode Oct 27 13:24:14.927000 audit: ANOM_PROMISCUOUS dev=vethec695cd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:14.927000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333230 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:14.943902 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:14.951000 audit[4425]: NETFILTER_CFG table=raw:73 family=2 entries=1 op=nft_register_rule pid=4425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:14.951000 audit[4425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd0477ea0 a2=0 a3=0 items=0 ppid=2508 pid=4425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:14.951000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:14.952518 systemd-networkd[1681]: vethec695cd: Link UP Oct 27 13:24:14.969107 kernel: eth0: renamed from veth66e8345 Oct 27 13:24:14.969171 kernel: docker0: port 1(vethec695cd) entered blocking state Oct 27 13:24:14.969189 kernel: docker0: port 1(vethec695cd) entered forwarding state Oct 27 13:24:14.973328 systemd-networkd[1681]: vethec695cd: Gained carrier Oct 27 13:24:14.974089 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:15.998260 systemd[1]: docker-ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f.scope: Deactivated successfully. Oct 27 13:24:16.011829 dockerd[2508]: time="2026-10-27T13:24:16.011781562Z" level=info msg="ignoring event" container=ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:16.012499 containerd[1962]: time="2026-10-27T13:24:16.012449140Z" level=info msg="shim disconnected" id=ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f namespace=moby Oct 27 13:24:16.012499 containerd[1962]: time="2026-10-27T13:24:16.012496610Z" level=info msg="cleaning up after shim disconnected" id=ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f namespace=moby Oct 27 13:24:16.012499 containerd[1962]: time="2026-10-27T13:24:16.012502185Z" level=info msg="cleaning up dead shim" id=ee5b9299fc8672ed014782a3dd51df5ae78195ec7a284d5b2fc506973d1a551f namespace=moby Oct 27 13:24:16.032492 systemd-networkd[1681]: vethec695cd: Lost carrier Oct 27 13:24:16.033809 kernel: docker0: port 1(vethec695cd) entered disabled state Oct 27 13:24:16.033837 kernel: veth66e8345: renamed from eth0 Oct 27 13:24:16.057000 audit[4456]: NETFILTER_CFG table=raw:74 family=2 entries=1 op=nft_unregister_rule pid=4456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:16.062699 kernel: kauditd_printk_skb: 119 callbacks suppressed Oct 27 13:24:16.062740 kernel: audit: type=1325 audit(1793107456.057:640): table=raw:74 family=2 entries=1 op=nft_unregister_rule pid=4456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:16.057000 audit[4456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd8e14c00 a2=0 a3=0 items=0 ppid=2508 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.087504 kernel: audit: type=1300 audit(1793107456.057:640): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd8e14c00 a2=0 a3=0 items=0 ppid=2508 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.057000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:16.098636 kernel: audit: type=1327 audit(1793107456.057:640): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:16.102907 kernel: docker0: port 1(vethec695cd) entered disabled state Oct 27 13:24:16.100149 systemd-networkd[1681]: vethec695cd: Link DOWN Oct 27 13:24:16.110686 kernel: vethec695cd (unregistering): left allmulticast mode Oct 27 13:24:16.110761 kernel: vethec695cd (unregistering): left promiscuous mode Oct 27 13:24:16.087000 audit: ANOM_PROMISCUOUS dev=vethec695cd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:16.114486 kernel: docker0: port 1(vethec695cd) entered disabled state Oct 27 13:24:16.114510 kernel: audit: type=1700 audit(1793107456.087:641): dev=vethec695cd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:16.087000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ade0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.087000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:16.159844 kernel: audit: type=1300 audit(1793107456.087:641): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ade0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.159924 kernel: audit: type=1327 audit(1793107456.087:641): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:16.161869 systemd[1]: run-docker-netns-2e7f0ebbd47c.mount: Deactivated successfully. Oct 27 13:24:16.164786 systemd[1]: var-lib-docker-overlay2-4409d2a40d11d8bfec0bfad434efcbb4127cda056a5d39a407b4497c09e7ee86-merged.mount: Deactivated successfully. Oct 27 13:24:16.176000 audit: BPF prog-id=128 op=UNLOAD Oct 27 13:24:16.176000 audit: BPF prog-id=132 op=UNLOAD Oct 27 13:24:16.184953 kernel: audit: type=1334 audit(1793107456.176:642): prog-id=128 op=UNLOAD Oct 27 13:24:16.185007 kernel: audit: type=1334 audit(1793107456.176:643): prog-id=132 op=UNLOAD Oct 27 13:24:16.292796 containerd[1962]: time="2026-10-27T13:24:16.292408398Z" level=info msg="connecting to shim 68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644" address="unix:///run/containerd/s/b7cf174cdd29ac2cf7768558fb7ac8246e2866bf5f80763ed055d6803a88496a" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:16.309507 systemd[1]: Started docker-68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644.scope - libcontainer container 68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644. Oct 27 13:24:16.317000 audit: BPF prog-id=133 op=LOAD Oct 27 13:24:16.321000 audit: BPF prog-id=134 op=LOAD Oct 27 13:24:16.326978 kernel: audit: type=1334 audit(1793107456.317:644): prog-id=133 op=LOAD Oct 27 13:24:16.327026 kernel: audit: type=1334 audit(1793107456.321:645): prog-id=134 op=LOAD Oct 27 13:24:16.321000 audit[4485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f287cfa9f90 a2=98 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.321000 audit: BPF prog-id=134 op=UNLOAD Oct 27 13:24:16.321000 audit[4485]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.321000 audit: BPF prog-id=135 op=LOAD Oct 27 13:24:16.321000 audit[4485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f287cfaa268 a2=98 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.326000 audit: BPF prog-id=136 op=LOAD Oct 27 13:24:16.326000 audit[4485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7f287cfa9fa8 a2=98 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.326000 audit: BPF prog-id=136 op=UNLOAD Oct 27 13:24:16.326000 audit[4485]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.326000 audit: BPF prog-id=135 op=UNLOAD Oct 27 13:24:16.326000 audit[4485]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.326000 audit: BPF prog-id=137 op=LOAD Oct 27 13:24:16.326000 audit[4485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f287cfaa4b8 a2=98 a3=0 items=0 ppid=4475 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383831366163656262316161356136393533343639643832 Oct 27 13:24:16.344221 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:16.348301 kernel: docker0: port 1(veth7de1789) entered blocking state Oct 27 13:24:16.348368 kernel: docker0: port 1(veth7de1789) entered disabled state Oct 27 13:24:16.352209 kernel: veth7de1789: entered allmulticast mode Oct 27 13:24:16.354912 kernel: veth7de1789: entered promiscuous mode Oct 27 13:24:16.339000 audit: ANOM_PROMISCUOUS dev=veth7de1789 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:16.339000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333260 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.339000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:16.356000 audit[4507]: NETFILTER_CFG table=raw:75 family=2 entries=1 op=nft_register_rule pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:16.356000 audit[4507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd2e79d00 a2=0 a3=0 items=0 ppid=2508 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:16.356000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:16.357499 systemd-networkd[1681]: veth7de1789: Link UP Oct 27 13:24:16.374172 kernel: eth0: renamed from vethaae9246 Oct 27 13:24:16.374243 kernel: docker0: port 1(veth7de1789) entered blocking state Oct 27 13:24:16.378129 kernel: docker0: port 1(veth7de1789) entered forwarding state Oct 27 13:24:16.378457 systemd-networkd[1681]: veth7de1789: Gained carrier Oct 27 13:24:16.379081 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:17.403324 systemd-networkd[1681]: veth7de1789: Gained IPv6LL Oct 27 13:24:17.404020 systemd[1]: docker-68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644.scope: Deactivated successfully. Oct 27 13:24:17.417422 dockerd[2508]: time="2026-10-27T13:24:17.417354244Z" level=info msg="ignoring event" container=68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:17.418333 containerd[1962]: time="2026-10-27T13:24:17.417729966Z" level=info msg="shim disconnected" id=68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644 namespace=moby Oct 27 13:24:17.418333 containerd[1962]: time="2026-10-27T13:24:17.417763709Z" level=info msg="cleaning up after shim disconnected" id=68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644 namespace=moby Oct 27 13:24:17.418333 containerd[1962]: time="2026-10-27T13:24:17.417770316Z" level=info msg="cleaning up dead shim" id=68816acebb1aa5a6953469d82a3aa68b062a3ce1d98b06993f11f91e9815f644 namespace=moby Oct 27 13:24:17.437664 systemd-networkd[1681]: veth7de1789: Lost carrier Oct 27 13:24:17.438280 kernel: docker0: port 1(veth7de1789) entered disabled state Oct 27 13:24:17.438338 kernel: vethaae9246: renamed from eth0 Oct 27 13:24:17.453000 audit[4537]: NETFILTER_CFG table=raw:76 family=2 entries=1 op=nft_unregister_rule pid=4537 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:17.453000 audit[4537]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdc348290 a2=0 a3=0 items=0 ppid=2508 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:17.464682 systemd-networkd[1681]: veth7de1789: Link DOWN Oct 27 13:24:17.468276 kernel: docker0: port 1(veth7de1789) entered disabled state Oct 27 13:24:17.476912 kernel: veth7de1789 (unregistering): left allmulticast mode Oct 27 13:24:17.476985 kernel: veth7de1789 (unregistering): left promiscuous mode Oct 27 13:24:17.463000 audit: ANOM_PROMISCUOUS dev=veth7de1789 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:17.481065 kernel: docker0: port 1(veth7de1789) entered disabled state Oct 27 13:24:17.463000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cfd20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.463000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:17.491324 systemd[1]: run-docker-netns-a1a8ad08d614.mount: Deactivated successfully. Oct 27 13:24:17.495061 systemd[1]: var-lib-docker-overlay2-4992b246c79d0a1519a60b0b67f20bdf2bd5e9d13e030711424c00c6628a2e5c-merged.mount: Deactivated successfully. Oct 27 13:24:17.500000 audit: BPF prog-id=133 op=UNLOAD Oct 27 13:24:17.500000 audit: BPF prog-id=137 op=UNLOAD Oct 27 13:24:17.583441 systemd[1]: var-lib-docker-overlay2-fee357dd22f5e48ff3500a71877029fee3ff86067a45fd74c8492e25deb69fe5\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:17.651616 containerd[1962]: time="2026-10-27T13:24:17.651541461Z" level=info msg="connecting to shim 3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae" address="unix:///run/containerd/s/a9805dab0dcc1f62f74d0960468546ac2d8cf2445cd3441a9b64b4adad966018" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:17.669509 systemd[1]: Started docker-3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae.scope - libcontainer container 3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae. Oct 27 13:24:17.677000 audit: BPF prog-id=138 op=LOAD Oct 27 13:24:17.677000 audit: BPF prog-id=139 op=LOAD Oct 27 13:24:17.677000 audit[4567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=19e9f2ddf90 a2=98 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.677000 audit: BPF prog-id=139 op=UNLOAD Oct 27 13:24:17.677000 audit[4567]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.677000 audit: BPF prog-id=140 op=LOAD Oct 27 13:24:17.677000 audit[4567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=19e9f2de268 a2=98 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.678000 audit: BPF prog-id=141 op=LOAD Oct 27 13:24:17.678000 audit[4567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=19e9f2ddfa8 a2=98 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.678000 audit: BPF prog-id=141 op=UNLOAD Oct 27 13:24:17.678000 audit[4567]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.678000 audit: BPF prog-id=140 op=UNLOAD Oct 27 13:24:17.678000 audit[4567]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.678000 audit: BPF prog-id=142 op=LOAD Oct 27 13:24:17.678000 audit[4567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=19e9f2de4b8 a2=98 a3=0 items=0 ppid=4555 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343732623239643935646366643866316662626439303632 Oct 27 13:24:17.694188 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:17.698302 kernel: docker0: port 1(veth1a08341) entered blocking state Oct 27 13:24:17.698380 kernel: docker0: port 1(veth1a08341) entered disabled state Oct 27 13:24:17.701150 kernel: veth1a08341: entered allmulticast mode Oct 27 13:24:17.704109 kernel: veth1a08341: entered promiscuous mode Oct 27 13:24:17.690000 audit: ANOM_PROMISCUOUS dev=veth1a08341 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:17.690000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c20478c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.690000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:17.705000 audit[4589]: NETFILTER_CFG table=raw:77 family=2 entries=1 op=nft_register_rule pid=4589 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:17.705000 audit[4589]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc5195a10 a2=0 a3=0 items=0 ppid=2508 pid=4589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:17.705000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:17.707629 systemd-networkd[1681]: veth1a08341: Link UP Oct 27 13:24:17.720115 kernel: eth0: renamed from veth8f86f46 Oct 27 13:24:17.726928 kernel: docker0: port 1(veth1a08341) entered blocking state Oct 27 13:24:17.726982 kernel: docker0: port 1(veth1a08341) entered forwarding state Oct 27 13:24:17.727413 systemd-networkd[1681]: veth1a08341: Gained carrier Oct 27 13:24:17.727984 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:18.656544 systemd[1]: Started sshd@36-4122-10.0.0.24:22-109.160.32.131:33372.service - OpenSSH per-connection server daemon (109.160.32.131:33372). Oct 27 13:24:18.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4122-10.0.0.24:22-109.160.32.131:33372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:18.755768 systemd[1]: docker-3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae.scope: Deactivated successfully. Oct 27 13:24:18.768965 dockerd[2508]: time="2026-10-27T13:24:18.768827008Z" level=info msg="ignoring event" container=3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:18.770007 containerd[1962]: time="2026-10-27T13:24:18.769368953Z" level=info msg="shim disconnected" id=3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae namespace=moby Oct 27 13:24:18.770007 containerd[1962]: time="2026-10-27T13:24:18.769399271Z" level=info msg="cleaning up after shim disconnected" id=3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae namespace=moby Oct 27 13:24:18.770007 containerd[1962]: time="2026-10-27T13:24:18.769407207Z" level=info msg="cleaning up dead shim" id=3472b29d95dcfd8f1fbbd90621113508ab9c12c6233854e3e71411dedcaaa4ae namespace=moby Oct 27 13:24:18.791247 kernel: docker0: port 1(veth1a08341) entered disabled state Oct 27 13:24:18.791423 systemd-networkd[1681]: veth1a08341: Lost carrier Oct 27 13:24:18.795117 kernel: veth8f86f46: renamed from eth0 Oct 27 13:24:18.810000 audit[4623]: NETFILTER_CFG table=raw:78 family=2 entries=1 op=nft_unregister_rule pid=4623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:18.810000 audit[4623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffd48e700 a2=0 a3=0 items=0 ppid=2508 pid=4623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:18.810000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:18.817530 systemd-networkd[1681]: veth1a08341: Link DOWN Oct 27 13:24:18.825384 kernel: docker0: port 1(veth1a08341) entered disabled state Oct 27 13:24:18.825447 kernel: veth1a08341 (unregistering): left allmulticast mode Oct 27 13:24:18.829199 kernel: veth1a08341 (unregistering): left promiscuous mode Oct 27 13:24:18.816000 audit: ANOM_PROMISCUOUS dev=veth1a08341 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:18.833190 kernel: docker0: port 1(veth1a08341) entered disabled state Oct 27 13:24:18.816000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3180 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:18.816000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:18.841365 systemd[1]: run-docker-netns-1f976b3c8b29.mount: Deactivated successfully. Oct 27 13:24:18.846074 systemd[1]: var-lib-docker-overlay2-fee357dd22f5e48ff3500a71877029fee3ff86067a45fd74c8492e25deb69fe5-merged.mount: Deactivated successfully. Oct 27 13:24:18.854000 audit: BPF prog-id=138 op=UNLOAD Oct 27 13:24:18.854000 audit: BPF prog-id=142 op=UNLOAD Oct 27 13:24:18.930258 systemd[1]: var-lib-docker-overlay2-e69f4e03622d9dadc94a3aafad37379d0b7471564f5a94f4a03d5fac476d9c68\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:18.992521 containerd[1962]: time="2026-10-27T13:24:18.992477674Z" level=info msg="connecting to shim ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f" address="unix:///run/containerd/s/38c90beb382377190e5d45231fb47185de8c2a87697afe4e0664e06680c11715" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:19.014254 systemd[1]: Started docker-ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f.scope - libcontainer container ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f. Oct 27 13:24:19.022000 audit: BPF prog-id=143 op=LOAD Oct 27 13:24:19.023000 audit: BPF prog-id=144 op=LOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=51b48e9b5f90 a2=98 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=144 op=UNLOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=145 op=LOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=51b48e9b6268 a2=98 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=146 op=LOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=51b48e9b5fa8 a2=98 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=146 op=UNLOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=145 op=UNLOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.023000 audit: BPF prog-id=147 op=LOAD Oct 27 13:24:19.023000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=51b48e9b64b8 a2=98 a3=0 items=0 ppid=4639 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633863646434653033393737646237656333636633633034 Oct 27 13:24:19.042126 kernel: docker0: port 1(veth9ecd8ab) entered blocking state Oct 27 13:24:19.042208 kernel: docker0: port 1(veth9ecd8ab) entered disabled state Oct 27 13:24:19.045110 kernel: veth9ecd8ab: entered allmulticast mode Oct 27 13:24:19.047976 kernel: veth9ecd8ab: entered promiscuous mode Oct 27 13:24:19.033000 audit: ANOM_PROMISCUOUS dev=veth9ecd8ab prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:19.033000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472f00 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.033000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:19.048638 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:19.049000 audit[4672]: NETFILTER_CFG table=raw:79 family=2 entries=1 op=nft_register_rule pid=4672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:19.049000 audit[4672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff95cd480 a2=0 a3=0 items=0 ppid=2508 pid=4672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:19.049000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:19.051236 systemd-networkd[1681]: veth9ecd8ab: Link UP Oct 27 13:24:19.066139 kernel: eth0: renamed from veth5026bd8 Oct 27 13:24:19.073364 kernel: docker0: port 1(veth9ecd8ab) entered blocking state Oct 27 13:24:19.073410 kernel: docker0: port 1(veth9ecd8ab) entered forwarding state Oct 27 13:24:19.073690 systemd-networkd[1681]: veth9ecd8ab: Gained carrier Oct 27 13:24:19.074575 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:19.746929 sshd[4598]: Invalid user erpnext from 109.160.32.131 port 33372 Oct 27 13:24:20.084800 sshd[4598]: Connection closed by invalid user erpnext 109.160.32.131 port 33372 [preauth] Oct 27 13:24:20.084000 audit[4598]: AUDIT1109 pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:20.086741 systemd[1]: sshd@36-4122-10.0.0.24:22-109.160.32.131:33372.service: Deactivated successfully. Oct 27 13:24:20.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4122-10.0.0.24:22-109.160.32.131:33372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:20.100025 systemd[1]: docker-ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f.scope: Deactivated successfully. Oct 27 13:24:20.113397 containerd[1962]: time="2026-10-27T13:24:20.113254582Z" level=info msg="shim disconnected" id=ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f namespace=moby Oct 27 13:24:20.113397 containerd[1962]: time="2026-10-27T13:24:20.113287044Z" level=info msg="cleaning up after shim disconnected" id=ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f namespace=moby Oct 27 13:24:20.113397 containerd[1962]: time="2026-10-27T13:24:20.113292740Z" level=info msg="cleaning up dead shim" id=ac8cdd4e03977db7ec3cf3c04fb7f5060495b48b54f4eaf4195faa7a08aaa86f namespace=moby Oct 27 13:24:20.132883 systemd-networkd[1681]: veth9ecd8ab: Lost carrier Oct 27 13:24:20.133564 kernel: docker0: port 1(veth9ecd8ab) entered disabled state Oct 27 13:24:20.136141 kernel: veth5026bd8: renamed from eth0 Oct 27 13:24:20.148000 audit[4705]: NETFILTER_CFG table=raw:80 family=2 entries=1 op=nft_unregister_rule pid=4705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:20.148000 audit[4705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3e31e40 a2=0 a3=0 items=0 ppid=2508 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.148000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:20.154560 systemd-networkd[1681]: veth9ecd8ab: Link DOWN Oct 27 13:24:20.158147 kernel: docker0: port 1(veth9ecd8ab) entered disabled state Oct 27 13:24:20.165620 kernel: veth9ecd8ab (unregistering): left allmulticast mode Oct 27 13:24:20.165693 kernel: veth9ecd8ab (unregistering): left promiscuous mode Oct 27 13:24:20.153000 audit: ANOM_PROMISCUOUS dev=veth9ecd8ab prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:20.169645 kernel: docker0: port 1(veth9ecd8ab) entered disabled state Oct 27 13:24:20.153000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a4520 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.153000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:20.181190 systemd[1]: run-docker-netns-66eb179ac118.mount: Deactivated successfully. Oct 27 13:24:20.185063 systemd[1]: var-lib-docker-overlay2-e69f4e03622d9dadc94a3aafad37379d0b7471564f5a94f4a03d5fac476d9c68-merged.mount: Deactivated successfully. Oct 27 13:24:20.191000 audit: BPF prog-id=143 op=UNLOAD Oct 27 13:24:20.191000 audit: BPF prog-id=147 op=UNLOAD Oct 27 13:24:20.343094 containerd[1962]: time="2026-10-27T13:24:20.342954159Z" level=info msg="connecting to shim b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39" address="unix:///run/containerd/s/40726c2057feefc0d8a25f039251d385177ec3c92e35f3e0a601b8cd73d793ed" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:20.364258 systemd[1]: Started docker-b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39.scope - libcontainer container b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39. Oct 27 13:24:20.371000 audit: BPF prog-id=148 op=LOAD Oct 27 13:24:20.372000 audit: BPF prog-id=149 op=LOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=38a656431f90 a2=98 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=149 op=UNLOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=150 op=LOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=38a656432268 a2=98 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=151 op=LOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=38a656431fa8 a2=98 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=151 op=UNLOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=150 op=UNLOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.372000 audit: BPF prog-id=152 op=LOAD Oct 27 13:24:20.372000 audit[4734]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=38a6564324b8 a2=98 a3=0 items=0 ppid=4723 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353330383963303438653461356336363665346338313265 Oct 27 13:24:20.393042 kernel: docker0: port 1(veth04cebf7) entered blocking state Oct 27 13:24:20.393148 kernel: docker0: port 1(veth04cebf7) entered disabled state Oct 27 13:24:20.396060 kernel: veth04cebf7: entered allmulticast mode Oct 27 13:24:20.398684 kernel: veth04cebf7: entered promiscuous mode Oct 27 13:24:20.384000 audit: ANOM_PROMISCUOUS dev=veth04cebf7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:20.384000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e450 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.384000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:20.399484 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:20.401000 audit[4755]: NETFILTER_CFG table=raw:81 family=2 entries=1 op=nft_register_rule pid=4755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:20.401000 audit[4755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe6bac1f0 a2=0 a3=0 items=0 ppid=2508 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:20.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:20.403210 systemd-networkd[1681]: veth04cebf7: Link UP Oct 27 13:24:20.416114 kernel: eth0: renamed from veth873a688 Oct 27 13:24:20.423126 kernel: docker0: port 1(veth04cebf7) entered blocking state Oct 27 13:24:20.423194 kernel: docker0: port 1(veth04cebf7) entered forwarding state Oct 27 13:24:20.423396 systemd-networkd[1681]: veth04cebf7: Gained carrier Oct 27 13:24:20.423580 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:21.447815 systemd[1]: docker-b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39.scope: Deactivated successfully. Oct 27 13:24:21.459942 dockerd[2508]: time="2026-10-27T13:24:21.459814972Z" level=info msg="ignoring event" container=b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:21.460559 containerd[1962]: time="2026-10-27T13:24:21.460226916Z" level=info msg="shim disconnected" id=b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39 namespace=moby Oct 27 13:24:21.460559 containerd[1962]: time="2026-10-27T13:24:21.460270218Z" level=info msg="cleaning up after shim disconnected" id=b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39 namespace=moby Oct 27 13:24:21.460559 containerd[1962]: time="2026-10-27T13:24:21.460276553Z" level=info msg="cleaning up dead shim" id=b53089c048e4a5c666e4c812e928dd6b68c46809a467ce7943042c84f2afba39 namespace=moby Oct 27 13:24:21.480082 systemd-networkd[1681]: veth04cebf7: Lost carrier Oct 27 13:24:21.480521 kernel: docker0: port 1(veth04cebf7) entered disabled state Oct 27 13:24:21.484125 kernel: veth873a688: renamed from eth0 Oct 27 13:24:21.497000 audit[4785]: NETFILTER_CFG table=raw:82 family=2 entries=1 op=nft_unregister_rule pid=4785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:21.501072 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:21.501151 kernel: audit: type=1325 audit(1793107461.497:699): table=raw:82 family=2 entries=1 op=nft_unregister_rule pid=4785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:21.497000 audit[4785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7f1cdb0 a2=0 a3=0 items=0 ppid=2508 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.526411 kernel: audit: type=1300 audit(1793107461.497:699): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7f1cdb0 a2=0 a3=0 items=0 ppid=2508 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.497000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:21.537730 kernel: audit: type=1327 audit(1793107461.497:699): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:21.543819 systemd-networkd[1681]: veth04cebf7: Link DOWN Oct 27 13:24:21.547219 kernel: docker0: port 1(veth04cebf7) entered disabled state Oct 27 13:24:21.554550 kernel: veth04cebf7 (unregistering): left allmulticast mode Oct 27 13:24:21.554622 kernel: veth04cebf7 (unregistering): left promiscuous mode Oct 27 13:24:21.542000 audit: ANOM_PROMISCUOUS dev=veth04cebf7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:21.558005 kernel: docker0: port 1(veth04cebf7) entered disabled state Oct 27 13:24:21.558028 kernel: audit: type=1700 audit(1793107461.542:700): dev=veth04cebf7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:21.542000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0640 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:21.600805 kernel: audit: type=1300 audit(1793107461.542:700): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0640 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.600869 kernel: audit: type=1327 audit(1793107461.542:700): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:21.602908 systemd[1]: run-docker-netns-9b94440655ac.mount: Deactivated successfully. Oct 27 13:24:21.606469 systemd[1]: var-lib-docker-overlay2-b7ef43fd3faf4e577431330111681466df8d62f0abb01aec1c930b199c3061e8-merged.mount: Deactivated successfully. Oct 27 13:24:21.618000 audit: BPF prog-id=148 op=UNLOAD Oct 27 13:24:21.618000 audit: BPF prog-id=152 op=UNLOAD Oct 27 13:24:21.627823 kernel: audit: type=1334 audit(1793107461.618:701): prog-id=148 op=UNLOAD Oct 27 13:24:21.627884 kernel: audit: type=1334 audit(1793107461.618:702): prog-id=152 op=UNLOAD Oct 27 13:24:21.699461 systemd[1]: var-lib-docker-overlay2-836567dbe6b188188c8dc7ef8762ab9a149e8ff4d95ae2e03d3421c0b4faf5aa-merged.mount: Deactivated successfully. Oct 27 13:24:21.737324 containerd[1962]: time="2026-10-27T13:24:21.737277317Z" level=info msg="connecting to shim 6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b" address="unix:///run/containerd/s/0d4b1642304d593aca421de5fea88fab8854d2b5895249b69caf754b36c0b5f4" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:21.758242 systemd[1]: Started docker-6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b.scope - libcontainer container 6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b. Oct 27 13:24:21.766000 audit: BPF prog-id=153 op=LOAD Oct 27 13:24:21.771000 audit: BPF prog-id=154 op=LOAD Oct 27 13:24:21.776415 kernel: audit: type=1334 audit(1793107461.766:703): prog-id=153 op=LOAD Oct 27 13:24:21.776476 kernel: audit: type=1334 audit(1793107461.771:704): prog-id=154 op=LOAD Oct 27 13:24:21.771000 audit[4814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3940c4631f90 a2=98 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=154 op=UNLOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=155 op=LOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3940c4632268 a2=98 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=156 op=LOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=3940c4631fa8 a2=98 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=156 op=UNLOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=155 op=UNLOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.776000 audit: BPF prog-id=157 op=LOAD Oct 27 13:24:21.776000 audit[4814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3940c46324b8 a2=98 a3=0 items=0 ppid=4802 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36626461623338653837306664653233666366656162336630 Oct 27 13:24:21.791158 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:21.795478 kernel: docker0: port 1(vetha4fff52) entered blocking state Oct 27 13:24:21.795543 kernel: docker0: port 1(vetha4fff52) entered disabled state Oct 27 13:24:21.798333 kernel: vetha4fff52: entered allmulticast mode Oct 27 13:24:21.801169 kernel: vetha4fff52: entered promiscuous mode Oct 27 13:24:21.787000 audit: ANOM_PROMISCUOUS dev=vetha4fff52 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:21.787000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f2f0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.787000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:21.802000 audit[4836]: NETFILTER_CFG table=raw:83 family=2 entries=1 op=nft_register_rule pid=4836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:21.802000 audit[4836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3301e30 a2=0 a3=0 items=0 ppid=2508 pid=4836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:21.802000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:21.804142 systemd-networkd[1681]: vetha4fff52: Link UP Oct 27 13:24:21.827707 kernel: eth0: renamed from veth173f2b6 Oct 27 13:24:21.827513 systemd-networkd[1681]: vetha4fff52: Gained carrier Oct 27 13:24:21.827846 kernel: docker0: port 1(vetha4fff52) entered blocking state Oct 27 13:24:21.827860 kernel: docker0: port 1(vetha4fff52) entered forwarding state Oct 27 13:24:21.828222 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:22.853594 systemd[1]: docker-6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b.scope: Deactivated successfully. Oct 27 13:24:22.864804 dockerd[2508]: time="2026-10-27T13:24:22.864598420Z" level=info msg="ignoring event" container=6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:22.865764 containerd[1962]: time="2026-10-27T13:24:22.865207993Z" level=info msg="shim disconnected" id=6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b namespace=moby Oct 27 13:24:22.865764 containerd[1962]: time="2026-10-27T13:24:22.865242639Z" level=info msg="cleaning up after shim disconnected" id=6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b namespace=moby Oct 27 13:24:22.865764 containerd[1962]: time="2026-10-27T13:24:22.865250167Z" level=info msg="cleaning up dead shim" id=6bdab38e870fde23fcfeab3f094a7e19546abe6f404d174760f40386188f804b namespace=moby Oct 27 13:24:22.884756 systemd-networkd[1681]: vetha4fff52: Lost carrier Oct 27 13:24:22.885375 kernel: docker0: port 1(vetha4fff52) entered disabled state Oct 27 13:24:22.885458 kernel: veth173f2b6: renamed from eth0 Oct 27 13:24:22.905000 audit[4868]: NETFILTER_CFG table=raw:84 family=2 entries=1 op=nft_unregister_rule pid=4868 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:22.905000 audit[4868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc017af20 a2=0 a3=0 items=0 ppid=2508 pid=4868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:22.905000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:22.913582 systemd-networkd[1681]: vetha4fff52: Link DOWN Oct 27 13:24:22.918122 kernel: docker0: port 1(vetha4fff52) entered disabled state Oct 27 13:24:22.925555 kernel: vetha4fff52 (unregistering): left allmulticast mode Oct 27 13:24:22.925625 kernel: vetha4fff52 (unregistering): left promiscuous mode Oct 27 13:24:22.912000 audit: ANOM_PROMISCUOUS dev=vetha4fff52 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:22.929211 kernel: docker0: port 1(vetha4fff52) entered disabled state Oct 27 13:24:22.912000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd17c0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:22.912000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:22.939574 systemd[1]: run-docker-netns-6030b39e61da.mount: Deactivated successfully. Oct 27 13:24:22.942064 systemd[1]: var-lib-docker-overlay2-836567dbe6b188188c8dc7ef8762ab9a149e8ff4d95ae2e03d3421c0b4faf5aa-merged.mount: Deactivated successfully. Oct 27 13:24:22.953000 audit: BPF prog-id=153 op=UNLOAD Oct 27 13:24:22.953000 audit: BPF prog-id=157 op=UNLOAD Oct 27 13:24:23.093695 containerd[1962]: time="2026-10-27T13:24:23.093252912Z" level=info msg="connecting to shim 76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb" address="unix:///run/containerd/s/f29039ead107bd4171783f27935538ecca527092894f2089fe7d882183c7380f" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:23.112259 systemd[1]: Started docker-76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb.scope - libcontainer container 76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb. Oct 27 13:24:23.120000 audit: BPF prog-id=158 op=LOAD Oct 27 13:24:23.120000 audit: BPF prog-id=159 op=LOAD Oct 27 13:24:23.120000 audit[4896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4a2cd7631f90 a2=98 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.120000 audit: BPF prog-id=159 op=UNLOAD Oct 27 13:24:23.120000 audit[4896]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.121000 audit: BPF prog-id=160 op=LOAD Oct 27 13:24:23.121000 audit[4896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4a2cd7632268 a2=98 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.121000 audit: BPF prog-id=161 op=LOAD Oct 27 13:24:23.121000 audit[4896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4a2cd7631fa8 a2=98 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.121000 audit: BPF prog-id=161 op=UNLOAD Oct 27 13:24:23.121000 audit[4896]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.121000 audit: BPF prog-id=160 op=UNLOAD Oct 27 13:24:23.121000 audit[4896]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.121000 audit: BPF prog-id=162 op=LOAD Oct 27 13:24:23.121000 audit[4896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4a2cd76324b8 a2=98 a3=0 items=0 ppid=4885 pid=4896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37366637373062376138613263323563336138373131383637 Oct 27 13:24:23.139455 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:23.143136 kernel: docker0: port 1(vethcc6a9ef) entered blocking state Oct 27 13:24:23.143217 kernel: docker0: port 1(vethcc6a9ef) entered disabled state Oct 27 13:24:23.145897 kernel: vethcc6a9ef: entered allmulticast mode Oct 27 13:24:23.149434 kernel: vethcc6a9ef: entered promiscuous mode Oct 27 13:24:23.134000 audit: ANOM_PROMISCUOUS dev=vethcc6a9ef prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:23.134000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c642a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.134000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:23.151000 audit[4919]: NETFILTER_CFG table=raw:85 family=2 entries=1 op=nft_register_rule pid=4919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:23.151000 audit[4919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe7bc46e0 a2=0 a3=0 items=0 ppid=2508 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:23.151000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:23.153575 systemd-networkd[1681]: vethcc6a9ef: Link UP Oct 27 13:24:23.168113 kernel: eth0: renamed from vethd3babd0 Oct 27 13:24:23.175287 kernel: docker0: port 1(vethcc6a9ef) entered blocking state Oct 27 13:24:23.175361 kernel: docker0: port 1(vethcc6a9ef) entered forwarding state Oct 27 13:24:23.175397 systemd-networkd[1681]: vethcc6a9ef: Gained carrier Oct 27 13:24:23.175891 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:23.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-12-10.0.0.24:22-109.160.32.131:43658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:23.814333 systemd[1]: Started sshd@37-12-10.0.0.24:22-109.160.32.131:43658.service - OpenSSH per-connection server daemon (109.160.32.131:43658). Oct 27 13:24:24.201018 systemd[1]: docker-76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb.scope: Deactivated successfully. Oct 27 13:24:24.213190 containerd[1962]: time="2026-10-27T13:24:24.213153956Z" level=info msg="shim disconnected" id=76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb namespace=moby Oct 27 13:24:24.213475 dockerd[2508]: time="2026-10-27T13:24:24.213173115Z" level=info msg="ignoring event" container=76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:24.214090 containerd[1962]: time="2026-10-27T13:24:24.213826794Z" level=info msg="cleaning up after shim disconnected" id=76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb namespace=moby Oct 27 13:24:24.214090 containerd[1962]: time="2026-10-27T13:24:24.213847409Z" level=info msg="cleaning up dead shim" id=76f770b7a8a2c25c3a8711867be0d7b3adb864246103c8ae85c8602da815a0fb namespace=moby Oct 27 13:24:24.236852 kernel: vethd3babd0: renamed from eth0 Oct 27 13:24:24.236377 systemd-networkd[1681]: vethcc6a9ef: Lost carrier Oct 27 13:24:24.237255 kernel: docker0: port 1(vethcc6a9ef) entered disabled state Oct 27 13:24:24.254000 audit[4952]: NETFILTER_CFG table=raw:86 family=2 entries=1 op=nft_unregister_rule pid=4952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:24.254000 audit[4952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd70d6620 a2=0 a3=0 items=0 ppid=2508 pid=4952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.254000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:24.263529 systemd-networkd[1681]: vethcc6a9ef: Link DOWN Oct 27 13:24:24.267144 kernel: docker0: port 1(vethcc6a9ef) entered disabled state Oct 27 13:24:24.263000 audit: ANOM_PROMISCUOUS dev=vethcc6a9ef prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:24.275506 kernel: vethcc6a9ef (unregistering): left allmulticast mode Oct 27 13:24:24.275554 kernel: vethcc6a9ef (unregistering): left promiscuous mode Oct 27 13:24:24.275580 kernel: docker0: port 1(vethcc6a9ef) entered disabled state Oct 27 13:24:24.263000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1de6360 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:24.287087 systemd[1]: run-docker-netns-0033db9973dd.mount: Deactivated successfully. Oct 27 13:24:24.289426 systemd[1]: var-lib-docker-overlay2-31f49bc59634e8c002f42de674724a5bf8ff8192ca3cdf571bd80aee81ca1a51-merged.mount: Deactivated successfully. Oct 27 13:24:24.297000 audit: BPF prog-id=158 op=UNLOAD Oct 27 13:24:24.297000 audit: BPF prog-id=162 op=UNLOAD Oct 27 13:24:24.373048 systemd[1]: var-lib-docker-overlay2-02f760255182d9f13431415590045e99330bb26871bffb3ff7ea745ce7b62a2a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:24.437821 containerd[1962]: time="2026-10-27T13:24:24.437743310Z" level=info msg="connecting to shim c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f" address="unix:///run/containerd/s/bb42e1ce7679e83bc7803375995318d47f3dfbe96eb4f24369bb6acedf96b71a" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:24.460249 systemd[1]: Started docker-c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f.scope - libcontainer container c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f. Oct 27 13:24:24.469000 audit: BPF prog-id=163 op=LOAD Oct 27 13:24:24.469000 audit: BPF prog-id=164 op=LOAD Oct 27 13:24:24.469000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=428a6aeabf90 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.470000 audit: BPF prog-id=164 op=UNLOAD Oct 27 13:24:24.470000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.470000 audit: BPF prog-id=165 op=LOAD Oct 27 13:24:24.470000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=428a6aeac268 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.470000 audit: BPF prog-id=166 op=LOAD Oct 27 13:24:24.470000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=428a6aeabfa8 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.471000 audit: BPF prog-id=166 op=UNLOAD Oct 27 13:24:24.471000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.471000 audit: BPF prog-id=165 op=UNLOAD Oct 27 13:24:24.471000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.471000 audit: BPF prog-id=167 op=LOAD Oct 27 13:24:24.471000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=428a6aeac4b8 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353262666634346135353266313463383838643031343532 Oct 27 13:24:24.484844 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:24.492474 kernel: docker0: port 1(veth3802252) entered blocking state Oct 27 13:24:24.492552 kernel: docker0: port 1(veth3802252) entered disabled state Oct 27 13:24:24.495745 kernel: veth3802252: entered allmulticast mode Oct 27 13:24:24.499150 kernel: veth3802252: entered promiscuous mode Oct 27 13:24:24.484000 audit: ANOM_PROMISCUOUS dev=veth3802252 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:24.484000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1f8e3c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.484000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:24.504000 audit[5003]: NETFILTER_CFG table=raw:87 family=2 entries=1 op=nft_register_rule pid=5003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:24.504000 audit[5003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffeba74ca0 a2=0 a3=0 items=0 ppid=2508 pid=5003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:24.504000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:24.505786 systemd-networkd[1681]: veth3802252: Link UP Oct 27 13:24:24.520116 kernel: eth0: renamed from vethfe3873e Oct 27 13:24:24.527830 kernel: docker0: port 1(veth3802252) entered blocking state Oct 27 13:24:24.527897 kernel: docker0: port 1(veth3802252) entered forwarding state Oct 27 13:24:24.527877 systemd-networkd[1681]: veth3802252: Gained carrier Oct 27 13:24:24.528481 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:25.381753 sshd[4928]: Connection closed by authenticating user root 109.160.32.131 port 43658 [preauth] Oct 27 13:24:25.382000 audit[4928]: AUDIT1109 pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:25.383832 systemd[1]: sshd@37-12-10.0.0.24:22-109.160.32.131:43658.service: Deactivated successfully. Oct 27 13:24:25.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-12-10.0.0.24:22-109.160.32.131:43658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:25.555636 systemd[1]: docker-c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f.scope: Deactivated successfully. Oct 27 13:24:25.566753 containerd[1962]: time="2026-10-27T13:24:25.566724044Z" level=info msg="shim disconnected" id=c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f namespace=moby Oct 27 13:24:25.567623 dockerd[2508]: time="2026-10-27T13:24:25.566940182Z" level=info msg="ignoring event" container=c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:25.567840 containerd[1962]: time="2026-10-27T13:24:25.567817800Z" level=info msg="cleaning up after shim disconnected" id=c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f namespace=moby Oct 27 13:24:25.568004 containerd[1962]: time="2026-10-27T13:24:25.567881116Z" level=info msg="cleaning up dead shim" id=c52bff44a552f14c888d014526f6822f7189210964aa6e20b18f7a421e41700f namespace=moby Oct 27 13:24:25.589114 kernel: docker0: port 1(veth3802252) entered disabled state Oct 27 13:24:25.589325 systemd-networkd[1681]: veth3802252: Lost carrier Oct 27 13:24:25.593110 kernel: vethfe3873e: renamed from eth0 Oct 27 13:24:25.606000 audit[5037]: NETFILTER_CFG table=raw:88 family=2 entries=1 op=nft_unregister_rule pid=5037 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:25.606000 audit[5037]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff6c3c8c0 a2=0 a3=0 items=0 ppid=2508 pid=5037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.606000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:25.612564 systemd-networkd[1681]: veth3802252: Link DOWN Oct 27 13:24:25.619733 kernel: docker0: port 1(veth3802252) entered disabled state Oct 27 13:24:25.619802 kernel: veth3802252 (unregistering): left allmulticast mode Oct 27 13:24:25.624055 kernel: veth3802252 (unregistering): left promiscuous mode Oct 27 13:24:25.612000 audit: ANOM_PROMISCUOUS dev=veth3802252 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:25.627352 kernel: docker0: port 1(veth3802252) entered disabled state Oct 27 13:24:25.612000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1f48a40 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.612000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:25.640204 systemd[1]: run-docker-netns-7cbd84b4c79b.mount: Deactivated successfully. Oct 27 13:24:25.643004 systemd[1]: var-lib-docker-overlay2-02f760255182d9f13431415590045e99330bb26871bffb3ff7ea745ce7b62a2a-merged.mount: Deactivated successfully. Oct 27 13:24:25.659000 audit: BPF prog-id=163 op=UNLOAD Oct 27 13:24:25.659000 audit: BPF prog-id=167 op=UNLOAD Oct 27 13:24:25.721316 systemd[1]: var-lib-docker-overlay2-eb5117e9efba335092c68d1793602be860f3efced0e015f8223ff17d187b141c\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:25.783628 containerd[1962]: time="2026-10-27T13:24:25.783524685Z" level=info msg="connecting to shim 5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc" address="unix:///run/containerd/s/8ffa7ad3a5aeaea7389d3d9bbc0a841ec4ba7459883919c20ebff801c9871bac" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:25.805251 systemd[1]: Started docker-5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc.scope - libcontainer container 5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc. Oct 27 13:24:25.812000 audit: BPF prog-id=168 op=LOAD Oct 27 13:24:25.813000 audit: BPF prog-id=169 op=LOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=166dbf863f90 a2=98 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=169 op=UNLOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=170 op=LOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=166dbf864268 a2=98 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=171 op=LOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=166dbf863fa8 a2=98 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=171 op=UNLOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=170 op=UNLOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.813000 audit: BPF prog-id=172 op=LOAD Oct 27 13:24:25.813000 audit[5066]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=166dbf8644b8 a2=98 a3=0 items=0 ppid=5055 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666438366263636566316161303830363631633663396332 Oct 27 13:24:25.830977 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:25.834515 kernel: docker0: port 1(vethe97dd18) entered blocking state Oct 27 13:24:25.834587 kernel: docker0: port 1(vethe97dd18) entered disabled state Oct 27 13:24:25.837302 kernel: vethe97dd18: entered allmulticast mode Oct 27 13:24:25.840160 kernel: vethe97dd18: entered promiscuous mode Oct 27 13:24:25.825000 audit: ANOM_PROMISCUOUS dev=vethe97dd18 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:25.825000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64ae0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.825000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:25.842000 audit[5087]: NETFILTER_CFG table=raw:89 family=2 entries=1 op=nft_register_rule pid=5087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:25.842000 audit[5087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd1913400 a2=0 a3=0 items=0 ppid=2508 pid=5087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:25.842000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:25.844416 systemd-networkd[1681]: vethe97dd18: Link UP Oct 27 13:24:25.858115 kernel: eth0: renamed from vethad471e7 Oct 27 13:24:25.865331 kernel: docker0: port 1(vethe97dd18) entered blocking state Oct 27 13:24:25.865390 kernel: docker0: port 1(vethe97dd18) entered forwarding state Oct 27 13:24:25.865578 systemd-networkd[1681]: vethe97dd18: Gained carrier Oct 27 13:24:25.866306 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:26.891340 systemd[1]: docker-5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc.scope: Deactivated successfully. Oct 27 13:24:26.903315 dockerd[2508]: time="2026-10-27T13:24:26.903276451Z" level=info msg="ignoring event" container=5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:26.903844 containerd[1962]: time="2026-10-27T13:24:26.903810202Z" level=info msg="shim disconnected" id=5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc namespace=moby Oct 27 13:24:26.903844 containerd[1962]: time="2026-10-27T13:24:26.903838056Z" level=info msg="cleaning up after shim disconnected" id=5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc namespace=moby Oct 27 13:24:26.903844 containerd[1962]: time="2026-10-27T13:24:26.903848760Z" level=info msg="cleaning up dead shim" id=5fd86bccef1aa080661c6c9c2c3712d61ad5ce9f8ad52c44057aec2ad5aebecc namespace=moby Oct 27 13:24:26.927912 systemd-networkd[1681]: vethe97dd18: Lost carrier Oct 27 13:24:26.928698 kernel: docker0: port 1(vethe97dd18) entered disabled state Oct 27 13:24:26.932117 kernel: vethad471e7: renamed from eth0 Oct 27 13:24:26.947000 audit[5119]: NETFILTER_CFG table=raw:90 family=2 entries=1 op=nft_unregister_rule pid=5119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:26.951464 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:26.951505 kernel: audit: type=1325 audit(1793107466.947:758): table=raw:90 family=2 entries=1 op=nft_unregister_rule pid=5119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:26.947000 audit[5119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffccaaa7b0 a2=0 a3=0 items=0 ppid=2508 pid=5119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:26.947000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:26.979248 kernel: audit: type=1300 audit(1793107466.947:758): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffccaaa7b0 a2=0 a3=0 items=0 ppid=2508 pid=5119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:26.979292 kernel: audit: type=1327 audit(1793107466.947:758): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:26.991826 systemd-networkd[1681]: vethe97dd18: Link DOWN Oct 27 13:24:26.999556 kernel: docker0: port 1(vethe97dd18) entered disabled state Oct 27 13:24:26.999632 kernel: vethe97dd18 (unregistering): left allmulticast mode Oct 27 13:24:27.003136 kernel: vethe97dd18 (unregistering): left promiscuous mode Oct 27 13:24:26.990000 audit: ANOM_PROMISCUOUS dev=vethe97dd18 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:27.007201 kernel: docker0: port 1(vethe97dd18) entered disabled state Oct 27 13:24:27.007224 kernel: audit: type=1700 audit(1793107466.990:759): dev=vethe97dd18 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:26.990000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1de7900 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.030589 systemd[1]: run-docker-netns-9b31807a208c.mount: Deactivated successfully. Oct 27 13:24:26.990000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:27.058852 kernel: audit: type=1300 audit(1793107466.990:759): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1de7900 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.058926 kernel: audit: type=1327 audit(1793107466.990:759): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:27.061723 systemd[1]: var-lib-docker-overlay2-eb5117e9efba335092c68d1793602be860f3efced0e015f8223ff17d187b141c-merged.mount: Deactivated successfully. Oct 27 13:24:27.066000 audit: BPF prog-id=168 op=UNLOAD Oct 27 13:24:27.066000 audit: BPF prog-id=172 op=UNLOAD Oct 27 13:24:27.075586 kernel: audit: type=1334 audit(1793107467.066:760): prog-id=168 op=UNLOAD Oct 27 13:24:27.075677 kernel: audit: type=1334 audit(1793107467.066:761): prog-id=172 op=UNLOAD Oct 27 13:24:27.198181 containerd[1962]: time="2026-10-27T13:24:27.197583792Z" level=info msg="connecting to shim b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd" address="unix:///run/containerd/s/f590a8f1bbbb89ca41af2a16afc8328d9908df3896631d714be8e86907a11c04" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:27.216257 systemd[1]: Started docker-b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd.scope - libcontainer container b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd. Oct 27 13:24:27.223000 audit: BPF prog-id=173 op=LOAD Oct 27 13:24:27.229133 kernel: audit: type=1334 audit(1793107467.223:762): prog-id=173 op=LOAD Oct 27 13:24:27.228000 audit: BPF prog-id=174 op=LOAD Oct 27 13:24:27.228000 audit[5147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=368a372e3f90 a2=98 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.228000 audit: BPF prog-id=174 op=UNLOAD Oct 27 13:24:27.228000 audit[5147]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.228000 audit: BPF prog-id=175 op=LOAD Oct 27 13:24:27.228000 audit[5147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=368a372e4268 a2=98 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.232000 audit: BPF prog-id=176 op=LOAD Oct 27 13:24:27.232000 audit[5147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=368a372e3fa8 a2=98 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.232000 audit: BPF prog-id=176 op=UNLOAD Oct 27 13:24:27.232000 audit[5147]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.232000 audit: BPF prog-id=175 op=UNLOAD Oct 27 13:24:27.232000 audit[5147]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.233000 audit: BPF prog-id=177 op=LOAD Oct 27 13:24:27.233000 audit[5147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=368a372e44b8 a2=98 a3=0 items=0 ppid=5135 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326562653837383736303433333533353131633162373839 Oct 27 13:24:27.234745 kernel: audit: type=1334 audit(1793107467.228:763): prog-id=174 op=LOAD Oct 27 13:24:27.249692 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:27.253446 kernel: docker0: port 1(veth71b5bad) entered blocking state Oct 27 13:24:27.253496 kernel: docker0: port 1(veth71b5bad) entered disabled state Oct 27 13:24:27.256412 kernel: veth71b5bad: entered allmulticast mode Oct 27 13:24:27.259574 kernel: veth71b5bad: entered promiscuous mode Oct 27 13:24:27.244000 audit: ANOM_PROMISCUOUS dev=veth71b5bad prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:27.244000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c20462d0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.244000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:27.261000 audit[5168]: NETFILTER_CFG table=raw:91 family=2 entries=1 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:27.261000 audit[5168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffefbd6f00 a2=0 a3=0 items=0 ppid=2508 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:27.261000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:27.263157 systemd-networkd[1681]: veth71b5bad: Link UP Oct 27 13:24:27.279114 kernel: eth0: renamed from veth94f468b Oct 27 13:24:27.286906 kernel: docker0: port 1(veth71b5bad) entered blocking state Oct 27 13:24:27.286970 kernel: docker0: port 1(veth71b5bad) entered forwarding state Oct 27 13:24:27.287301 systemd-networkd[1681]: veth71b5bad: Gained carrier Oct 27 13:24:27.288067 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:28.314063 systemd[1]: docker-b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd.scope: Deactivated successfully. Oct 27 13:24:28.326628 containerd[1962]: time="2026-10-27T13:24:28.326037074Z" level=info msg="shim disconnected" id=b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd namespace=moby Oct 27 13:24:28.326628 containerd[1962]: time="2026-10-27T13:24:28.326073216Z" level=info msg="cleaning up after shim disconnected" id=b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd namespace=moby Oct 27 13:24:28.326628 containerd[1962]: time="2026-10-27T13:24:28.326078823Z" level=info msg="cleaning up dead shim" id=b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd namespace=moby Oct 27 13:24:28.326976 dockerd[2508]: time="2026-10-27T13:24:28.326583888Z" level=info msg="ignoring event" container=b2ebe87876043353511c1b7892416431494d03d60cef4707535d7e94ee2335cd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:28.347690 systemd-networkd[1681]: veth71b5bad: Lost carrier Oct 27 13:24:28.348462 kernel: docker0: port 1(veth71b5bad) entered disabled state Oct 27 13:24:28.348493 kernel: veth94f468b: renamed from eth0 Oct 27 13:24:28.367000 audit[5200]: NETFILTER_CFG table=raw:92 family=2 entries=1 op=nft_unregister_rule pid=5200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:28.367000 audit[5200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffb8828f0 a2=0 a3=0 items=0 ppid=2508 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.367000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:28.377607 systemd-networkd[1681]: veth71b5bad: Link DOWN Oct 27 13:24:28.382108 kernel: docker0: port 1(veth71b5bad) entered disabled state Oct 27 13:24:28.389925 kernel: veth71b5bad (unregistering): left allmulticast mode Oct 27 13:24:28.389997 kernel: veth71b5bad (unregistering): left promiscuous mode Oct 27 13:24:28.376000 audit: ANOM_PROMISCUOUS dev=veth71b5bad prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:28.393715 kernel: docker0: port 1(veth71b5bad) entered disabled state Oct 27 13:24:28.376000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce3a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.376000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:28.405171 systemd[1]: run-docker-netns-0803c13111da.mount: Deactivated successfully. Oct 27 13:24:28.408913 systemd[1]: var-lib-docker-overlay2-f4b209914898cbea46420906a9d593aca8d3389938695c107831044a01f11d6c-merged.mount: Deactivated successfully. Oct 27 13:24:28.420000 audit: BPF prog-id=173 op=UNLOAD Oct 27 13:24:28.420000 audit: BPF prog-id=177 op=UNLOAD Oct 27 13:24:28.472708 systemd[1]: var-lib-docker-overlay2-2aff1b30ea5b63b6f3b7ad7901c139dbe4b51fdb00934ca528d61351134d16b2\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:28.535855 containerd[1962]: time="2026-10-27T13:24:28.535488048Z" level=info msg="connecting to shim 1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29" address="unix:///run/containerd/s/5673b69d3879b43df27a25f3468939eb02e45f138a4f4713727e5525fba1ca8d" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:28.554253 systemd[1]: Started docker-1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29.scope - libcontainer container 1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29. Oct 27 13:24:28.562000 audit: BPF prog-id=178 op=LOAD Oct 27 13:24:28.562000 audit: BPF prog-id=179 op=LOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2bb610db1f90 a2=98 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=179 op=UNLOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=180 op=LOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2bb610db2268 a2=98 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=181 op=LOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2bb610db1fa8 a2=98 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=181 op=UNLOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=180 op=UNLOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.562000 audit: BPF prog-id=182 op=LOAD Oct 27 13:24:28.562000 audit[5228]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2bb610db24b8 a2=98 a3=0 items=0 ppid=5217 pid=5228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656264363135393566313933646163613837396165616332 Oct 27 13:24:28.583206 kernel: docker0: port 1(vethd5ddb17) entered blocking state Oct 27 13:24:28.583354 kernel: docker0: port 1(vethd5ddb17) entered disabled state Oct 27 13:24:28.586296 kernel: vethd5ddb17: entered allmulticast mode Oct 27 13:24:28.589109 kernel: vethd5ddb17: entered promiscuous mode Oct 27 13:24:28.574000 audit: ANOM_PROMISCUOUS dev=vethd5ddb17 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:28.574000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047440 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:28.591000 audit[5250]: NETFILTER_CFG table=raw:93 family=2 entries=1 op=nft_register_rule pid=5250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:28.591000 audit[5250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdaa693c0 a2=0 a3=0 items=0 ppid=2508 pid=5250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:28.591000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:28.590164 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:28.593037 systemd-networkd[1681]: vethd5ddb17: Link UP Oct 27 13:24:28.613382 kernel: eth0: renamed from veth69c5968 Oct 27 13:24:28.613356 systemd-networkd[1681]: vethd5ddb17: Gained carrier Oct 27 13:24:28.613787 kernel: docker0: port 1(vethd5ddb17) entered blocking state Oct 27 13:24:28.613838 kernel: docker0: port 1(vethd5ddb17) entered forwarding state Oct 27 13:24:28.614576 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:29.658813 systemd[1]: docker-1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29.scope: Deactivated successfully. Oct 27 13:24:29.662359 systemd[1]: Started sshd@38-4123-10.0.0.24:22-109.160.32.131:43692.service - OpenSSH per-connection server daemon (109.160.32.131:43692). Oct 27 13:24:29.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4123-10.0.0.24:22-109.160.32.131:43692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:29.666794 dockerd[2508]: time="2026-10-27T13:24:29.666760835Z" level=info msg="ignoring event" container=1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:29.667496 containerd[1962]: time="2026-10-27T13:24:29.667222158Z" level=info msg="shim disconnected" id=1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29 namespace=moby Oct 27 13:24:29.667496 containerd[1962]: time="2026-10-27T13:24:29.667251045Z" level=info msg="cleaning up after shim disconnected" id=1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29 namespace=moby Oct 27 13:24:29.667496 containerd[1962]: time="2026-10-27T13:24:29.667257108Z" level=info msg="cleaning up dead shim" id=1ebd61595f193daca879aeac248c1dfccc5a19bbe08eceb3e370dc228b85eb29 namespace=moby Oct 27 13:24:29.693573 systemd-networkd[1681]: vethd5ddb17: Lost carrier Oct 27 13:24:29.694291 kernel: docker0: port 1(vethd5ddb17) entered disabled state Oct 27 13:24:29.694365 kernel: veth69c5968: renamed from eth0 Oct 27 13:24:29.709000 audit[5284]: NETFILTER_CFG table=raw:94 family=2 entries=1 op=nft_unregister_rule pid=5284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:29.709000 audit[5284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffde4bd650 a2=0 a3=0 items=0 ppid=2508 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.709000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:29.715533 systemd-networkd[1681]: vethd5ddb17: Link DOWN Oct 27 13:24:29.720471 kernel: docker0: port 1(vethd5ddb17) entered disabled state Oct 27 13:24:29.720526 kernel: vethd5ddb17 (unregistering): left allmulticast mode Oct 27 13:24:29.727893 kernel: vethd5ddb17 (unregistering): left promiscuous mode Oct 27 13:24:29.714000 audit: ANOM_PROMISCUOUS dev=vethd5ddb17 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:29.731770 kernel: docker0: port 1(vethd5ddb17) entered disabled state Oct 27 13:24:29.714000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf4c0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:29.743116 systemd[1]: run-docker-netns-293f91d3dea1.mount: Deactivated successfully. Oct 27 13:24:29.745770 systemd[1]: var-lib-docker-overlay2-2aff1b30ea5b63b6f3b7ad7901c139dbe4b51fdb00934ca528d61351134d16b2-merged.mount: Deactivated successfully. Oct 27 13:24:29.756000 audit: BPF prog-id=178 op=UNLOAD Oct 27 13:24:29.756000 audit: BPF prog-id=182 op=UNLOAD Oct 27 13:24:29.832664 systemd[1]: var-lib-docker-overlay2-6b1cd5ad61908abdf86243bd7c31a1cc8b709a5fbfe2f530cb1f40e7d6f63668\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:29.895201 containerd[1962]: time="2026-10-27T13:24:29.895160008Z" level=info msg="connecting to shim e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03" address="unix:///run/containerd/s/8d8a3f384e5dc19f26285becdfc669dffd0053b152b02f511d7aab4dc12db762" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:29.915252 systemd[1]: Started docker-e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03.scope - libcontainer container e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03. Oct 27 13:24:29.924000 audit: BPF prog-id=183 op=LOAD Oct 27 13:24:29.924000 audit: BPF prog-id=184 op=LOAD Oct 27 13:24:29.924000 audit[5313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2083ec2f5f90 a2=98 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.924000 audit: BPF prog-id=184 op=UNLOAD Oct 27 13:24:29.924000 audit[5313]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.924000 audit: BPF prog-id=185 op=LOAD Oct 27 13:24:29.924000 audit[5313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2083ec2f6268 a2=98 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.925000 audit: BPF prog-id=186 op=LOAD Oct 27 13:24:29.925000 audit[5313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2083ec2f5fa8 a2=98 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.925000 audit: BPF prog-id=186 op=UNLOAD Oct 27 13:24:29.925000 audit[5313]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.925000 audit: BPF prog-id=185 op=UNLOAD Oct 27 13:24:29.925000 audit[5313]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.925000 audit: BPF prog-id=187 op=LOAD Oct 27 13:24:29.925000 audit[5313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2083ec2f64b8 a2=98 a3=0 items=0 ppid=5302 pid=5313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65346330313165393964333931373562313864383730313266 Oct 27 13:24:29.946613 kernel: docker0: port 1(veth706ace7) entered blocking state Oct 27 13:24:29.946713 kernel: docker0: port 1(veth706ace7) entered disabled state Oct 27 13:24:29.949516 kernel: veth706ace7: entered allmulticast mode Oct 27 13:24:29.952593 kernel: veth706ace7: entered promiscuous mode Oct 27 13:24:29.938000 audit: ANOM_PROMISCUOUS dev=veth706ace7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:29.938000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c14722d0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.938000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:29.953687 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:29.954000 audit[5334]: NETFILTER_CFG table=raw:95 family=2 entries=1 op=nft_register_rule pid=5334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:29.954000 audit[5334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff9855750 a2=0 a3=0 items=0 ppid=2508 pid=5334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:29.954000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:29.956513 systemd-networkd[1681]: veth706ace7: Link UP Oct 27 13:24:29.974315 kernel: eth0: renamed from veth47943da Oct 27 13:24:29.974389 kernel: docker0: port 1(veth706ace7) entered blocking state Oct 27 13:24:29.977684 kernel: docker0: port 1(veth706ace7) entered forwarding state Oct 27 13:24:29.977918 systemd-networkd[1681]: veth706ace7: Gained carrier Oct 27 13:24:29.978480 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:30.230600 sshd[5265]: Invalid user odoo13 from 109.160.32.131 port 43692 Oct 27 13:24:30.396224 sshd[5265]: Connection closed by invalid user odoo13 109.160.32.131 port 43692 [preauth] Oct 27 13:24:30.395000 audit[5265]: AUDIT1109 pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:30.398333 systemd[1]: sshd@38-4123-10.0.0.24:22-109.160.32.131:43692.service: Deactivated successfully. Oct 27 13:24:30.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4123-10.0.0.24:22-109.160.32.131:43692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:31.006114 systemd[1]: docker-e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03.scope: Deactivated successfully. Oct 27 13:24:31.019233 containerd[1962]: time="2026-10-27T13:24:31.019179573Z" level=info msg="shim disconnected" id=e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03 namespace=moby Oct 27 13:24:31.019233 containerd[1962]: time="2026-10-27T13:24:31.019208451Z" level=info msg="cleaning up after shim disconnected" id=e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03 namespace=moby Oct 27 13:24:31.019233 containerd[1962]: time="2026-10-27T13:24:31.019214435Z" level=info msg="cleaning up dead shim" id=e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03 namespace=moby Oct 27 13:24:31.019566 dockerd[2508]: time="2026-10-27T13:24:31.019104826Z" level=info msg="ignoring event" container=e4c011e99d39175b18d87012fd3c428685a5a42d90aab9b43b039a8f2032bd03 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:31.038542 systemd-networkd[1681]: veth706ace7: Lost carrier Oct 27 13:24:31.039130 kernel: docker0: port 1(veth706ace7) entered disabled state Oct 27 13:24:31.039263 kernel: veth47943da: renamed from eth0 Oct 27 13:24:31.056000 audit[5366]: NETFILTER_CFG table=raw:96 family=2 entries=1 op=nft_unregister_rule pid=5366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:31.056000 audit[5366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc1f88f70 a2=0 a3=0 items=0 ppid=2508 pid=5366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.056000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:31.064648 systemd-networkd[1681]: veth706ace7: Link DOWN Oct 27 13:24:31.070119 kernel: docker0: port 1(veth706ace7) entered disabled state Oct 27 13:24:31.063000 audit: ANOM_PROMISCUOUS dev=veth706ace7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:31.078576 kernel: veth706ace7 (unregistering): left allmulticast mode Oct 27 13:24:31.078623 kernel: veth706ace7 (unregistering): left promiscuous mode Oct 27 13:24:31.078643 kernel: docker0: port 1(veth706ace7) entered disabled state Oct 27 13:24:31.063000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a24a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.063000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:31.093066 systemd[1]: run-docker-netns-050ec80875f0.mount: Deactivated successfully. Oct 27 13:24:31.095417 systemd[1]: var-lib-docker-overlay2-6b1cd5ad61908abdf86243bd7c31a1cc8b709a5fbfe2f530cb1f40e7d6f63668-merged.mount: Deactivated successfully. Oct 27 13:24:31.107000 audit: BPF prog-id=183 op=UNLOAD Oct 27 13:24:31.107000 audit: BPF prog-id=187 op=UNLOAD Oct 27 13:24:31.239369 containerd[1962]: time="2026-10-27T13:24:31.239326299Z" level=info msg="connecting to shim 4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b" address="unix:///run/containerd/s/3829a64f40460f7b4372e24d4fb9bc0587f967e4e4b73648e6951128d39be1f4" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:31.258254 systemd[1]: Started docker-4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b.scope - libcontainer container 4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b. Oct 27 13:24:31.265000 audit: BPF prog-id=188 op=LOAD Oct 27 13:24:31.266000 audit: BPF prog-id=189 op=LOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=defec831f90 a2=98 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=189 op=UNLOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=190 op=LOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=defec832268 a2=98 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=191 op=LOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=defec831fa8 a2=98 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=191 op=UNLOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=190 op=UNLOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.266000 audit: BPF prog-id=192 op=LOAD Oct 27 13:24:31.266000 audit[5397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=defec8324b8 a2=98 a3=0 items=0 ppid=5384 pid=5397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636337633138613664353932373164313661613037656330 Oct 27 13:24:31.286985 kernel: docker0: port 1(veth664a41a) entered blocking state Oct 27 13:24:31.287090 kernel: docker0: port 1(veth664a41a) entered disabled state Oct 27 13:24:31.289759 kernel: veth664a41a: entered allmulticast mode Oct 27 13:24:31.292439 kernel: veth664a41a: entered promiscuous mode Oct 27 13:24:31.278000 audit: ANOM_PROMISCUOUS dev=veth664a41a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:31.278000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7d10 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.278000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:31.294205 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:31.294000 audit[5418]: NETFILTER_CFG table=raw:97 family=2 entries=1 op=nft_register_rule pid=5418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:31.294000 audit[5418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8d983e0 a2=0 a3=0 items=0 ppid=2508 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:31.294000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:31.296840 systemd-networkd[1681]: veth664a41a: Link UP Oct 27 13:24:31.317661 kernel: eth0: renamed from vethea94077 Oct 27 13:24:31.317739 kernel: docker0: port 1(veth664a41a) entered blocking state Oct 27 13:24:31.317757 kernel: docker0: port 1(veth664a41a) entered forwarding state Oct 27 13:24:31.317854 systemd-networkd[1681]: veth664a41a: Gained carrier Oct 27 13:24:31.318619 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:32.342166 systemd[1]: docker-4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b.scope: Deactivated successfully. Oct 27 13:24:32.357200 dockerd[2508]: time="2026-10-27T13:24:32.357030134Z" level=info msg="ignoring event" container=4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:32.358025 containerd[1962]: time="2026-10-27T13:24:32.357755018Z" level=info msg="shim disconnected" id=4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b namespace=moby Oct 27 13:24:32.358025 containerd[1962]: time="2026-10-27T13:24:32.357786312Z" level=info msg="cleaning up after shim disconnected" id=4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b namespace=moby Oct 27 13:24:32.358025 containerd[1962]: time="2026-10-27T13:24:32.357811015Z" level=info msg="cleaning up dead shim" id=4cc7c18a6d59271d16aa07ec06187557ce327851b726b212db143ab68586995b namespace=moby Oct 27 13:24:32.378123 kernel: docker0: port 1(veth664a41a) entered disabled state Oct 27 13:24:32.378202 kernel: vethea94077: renamed from eth0 Oct 27 13:24:32.378274 systemd-networkd[1681]: veth664a41a: Lost carrier Oct 27 13:24:32.395000 audit[5448]: NETFILTER_CFG table=raw:98 family=2 entries=1 op=nft_unregister_rule pid=5448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:32.399267 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:32.399317 kernel: audit: type=1325 audit(1793107472.395:817): table=raw:98 family=2 entries=1 op=nft_unregister_rule pid=5448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:32.395000 audit[5448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf55afb0 a2=0 a3=0 items=0 ppid=2508 pid=5448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.423656 kernel: audit: type=1300 audit(1793107472.395:817): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf55afb0 a2=0 a3=0 items=0 ppid=2508 pid=5448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.395000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:32.436206 kernel: audit: type=1327 audit(1793107472.395:817): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:32.436752 systemd-networkd[1681]: veth664a41a: Link DOWN Oct 27 13:24:32.441112 kernel: docker0: port 1(veth664a41a) entered disabled state Oct 27 13:24:32.448908 kernel: veth664a41a (unregistering): left allmulticast mode Oct 27 13:24:32.448971 kernel: veth664a41a (unregistering): left promiscuous mode Oct 27 13:24:32.424000 audit: ANOM_PROMISCUOUS dev=veth664a41a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:32.453182 kernel: docker0: port 1(veth664a41a) entered disabled state Oct 27 13:24:32.453204 kernel: audit: type=1700 audit(1793107472.424:818): dev=veth664a41a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:32.424000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2260 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.424000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:32.485307 systemd[1]: run-docker-netns-be0fac884e48.mount: Deactivated successfully. Oct 27 13:24:32.490426 systemd[1]: var-lib-docker-overlay2-dadcda02b13f2f1141bd93f9e172e5e68637750b9f63801af9d91e1c5eeb5a3c-merged.mount: Deactivated successfully. Oct 27 13:24:32.499137 kernel: audit: type=1300 audit(1793107472.424:818): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2260 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.499220 kernel: audit: type=1327 audit(1793107472.424:818): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:32.514000 audit: BPF prog-id=188 op=UNLOAD Oct 27 13:24:32.514000 audit: BPF prog-id=192 op=UNLOAD Oct 27 13:24:32.523895 kernel: audit: type=1334 audit(1793107472.514:819): prog-id=188 op=UNLOAD Oct 27 13:24:32.523949 kernel: audit: type=1334 audit(1793107472.514:820): prog-id=192 op=UNLOAD Oct 27 13:24:32.575365 systemd[1]: var-lib-docker-overlay2-2329079c8851e9039a1cd671523fab7f52370f781e1b5023904c79aff6ca7f46\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:32.639680 containerd[1962]: time="2026-10-27T13:24:32.639567190Z" level=info msg="connecting to shim ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649" address="unix:///run/containerd/s/6b3923074b941687550a6c4932eaf2547716d48e00601b30d96792001453bd5d" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:32.661268 systemd[1]: Started docker-ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649.scope - libcontainer container ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649. Oct 27 13:24:32.668000 audit: BPF prog-id=193 op=LOAD Oct 27 13:24:32.674114 kernel: audit: type=1334 audit(1793107472.668:821): prog-id=193 op=LOAD Oct 27 13:24:32.673000 audit: BPF prog-id=194 op=LOAD Oct 27 13:24:32.673000 audit[5475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=263e38a31f90 a2=98 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=194 op=UNLOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=195 op=LOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=263e38a32268 a2=98 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=196 op=LOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=263e38a31fa8 a2=98 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=196 op=UNLOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=195 op=UNLOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.677000 audit: BPF prog-id=197 op=LOAD Oct 27 13:24:32.677000 audit[5475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=263e38a324b8 a2=98 a3=0 items=0 ppid=5465 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613062383735363338343937353831303130323539303163 Oct 27 13:24:32.679653 kernel: audit: type=1334 audit(1793107472.673:822): prog-id=194 op=LOAD Oct 27 13:24:32.693288 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:32.701745 kernel: docker0: port 1(veth8ca3a76) entered blocking state Oct 27 13:24:32.701800 kernel: docker0: port 1(veth8ca3a76) entered disabled state Oct 27 13:24:32.704827 kernel: veth8ca3a76: entered allmulticast mode Oct 27 13:24:32.708007 kernel: veth8ca3a76: entered promiscuous mode Oct 27 13:24:32.692000 audit: ANOM_PROMISCUOUS dev=veth8ca3a76 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:32.692000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1473170 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.692000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:32.709000 audit[5499]: NETFILTER_CFG table=raw:99 family=2 entries=1 op=nft_register_rule pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:32.709000 audit[5499]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcc7b0fb0 a2=0 a3=0 items=0 ppid=2508 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:32.709000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:32.710906 systemd-networkd[1681]: veth8ca3a76: Link UP Oct 27 13:24:32.724128 kernel: eth0: renamed from veth29bc94c Oct 27 13:24:32.731251 kernel: docker0: port 1(veth8ca3a76) entered blocking state Oct 27 13:24:32.731440 kernel: docker0: port 1(veth8ca3a76) entered forwarding state Oct 27 13:24:32.731325 systemd-networkd[1681]: veth8ca3a76: Gained carrier Oct 27 13:24:32.732000 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:33.759728 systemd[1]: docker-ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649.scope: Deactivated successfully. Oct 27 13:24:33.772869 dockerd[2508]: time="2026-10-27T13:24:33.772182977Z" level=info msg="ignoring event" container=ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:33.773199 containerd[1962]: time="2026-10-27T13:24:33.772916621Z" level=info msg="shim disconnected" id=ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649 namespace=moby Oct 27 13:24:33.773199 containerd[1962]: time="2026-10-27T13:24:33.772944251Z" level=info msg="cleaning up after shim disconnected" id=ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649 namespace=moby Oct 27 13:24:33.773199 containerd[1962]: time="2026-10-27T13:24:33.772950979Z" level=info msg="cleaning up dead shim" id=ea0b87563849758101025901ce49e46121ad6c3781d06fb5a532211c13d07649 namespace=moby Oct 27 13:24:33.795304 kernel: docker0: port 1(veth8ca3a76) entered disabled state Oct 27 13:24:33.795164 systemd-networkd[1681]: veth8ca3a76: Lost carrier Oct 27 13:24:33.795617 kernel: veth29bc94c: renamed from eth0 Oct 27 13:24:33.814000 audit[5528]: NETFILTER_CFG table=raw:100 family=2 entries=1 op=nft_unregister_rule pid=5528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:33.814000 audit[5528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe65a4d30 a2=0 a3=0 items=0 ppid=2508 pid=5528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:33.814000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:33.821507 systemd-networkd[1681]: veth8ca3a76: Link DOWN Oct 27 13:24:33.829194 kernel: docker0: port 1(veth8ca3a76) entered disabled state Oct 27 13:24:33.829266 kernel: veth8ca3a76 (unregistering): left allmulticast mode Oct 27 13:24:33.832546 kernel: veth8ca3a76 (unregistering): left promiscuous mode Oct 27 13:24:33.820000 audit: ANOM_PROMISCUOUS dev=veth8ca3a76 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:33.836590 kernel: docker0: port 1(veth8ca3a76) entered disabled state Oct 27 13:24:33.820000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3380 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:33.820000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:33.844056 systemd[1]: run-docker-netns-dd984a0f7475.mount: Deactivated successfully. Oct 27 13:24:33.847071 systemd[1]: var-lib-docker-overlay2-2329079c8851e9039a1cd671523fab7f52370f781e1b5023904c79aff6ca7f46-merged.mount: Deactivated successfully. Oct 27 13:24:33.857000 audit: BPF prog-id=193 op=UNLOAD Oct 27 13:24:33.857000 audit: BPF prog-id=197 op=UNLOAD Oct 27 13:24:33.931384 systemd[1]: var-lib-docker-overlay2-d31672d2b630dd4f9deb26ea6bf21aa51c03326327090ba7a70531ef8758263b\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:33.990909 containerd[1962]: time="2026-10-27T13:24:33.990854536Z" level=info msg="connecting to shim ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97" address="unix:///run/containerd/s/715f4ba3ddafbf73e035d332156b2b85cd4ab304a2dca06dfaba794afc179815" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:34.007261 systemd[1]: Started docker-ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97.scope - libcontainer container ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97. Oct 27 13:24:34.014000 audit: BPF prog-id=198 op=LOAD Oct 27 13:24:34.015000 audit: BPF prog-id=199 op=LOAD Oct 27 13:24:34.015000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25774bfadf90 a2=98 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.015000 audit: BPF prog-id=199 op=UNLOAD Oct 27 13:24:34.015000 audit[5558]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.015000 audit: BPF prog-id=200 op=LOAD Oct 27 13:24:34.015000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25774bfae268 a2=98 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.016000 audit: BPF prog-id=201 op=LOAD Oct 27 13:24:34.016000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=25774bfadfa8 a2=98 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.016000 audit: BPF prog-id=201 op=UNLOAD Oct 27 13:24:34.016000 audit[5558]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.016000 audit: BPF prog-id=200 op=UNLOAD Oct 27 13:24:34.016000 audit[5558]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.016000 audit: BPF prog-id=202 op=LOAD Oct 27 13:24:34.016000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25774bfae4b8 a2=98 a3=0 items=0 ppid=5547 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663335656164653436643831396130653736353634343062 Oct 27 13:24:34.035727 kernel: docker0: port 1(vethfb1046b) entered blocking state Oct 27 13:24:34.035810 kernel: docker0: port 1(vethfb1046b) entered disabled state Oct 27 13:24:34.038587 kernel: vethfb1046b: entered allmulticast mode Oct 27 13:24:34.041375 kernel: vethfb1046b: entered promiscuous mode Oct 27 13:24:34.027000 audit: ANOM_PROMISCUOUS dev=vethfb1046b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:34.027000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c23324e0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.027000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:34.042076 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:34.042000 audit[5578]: NETFILTER_CFG table=raw:101 family=2 entries=1 op=nft_register_rule pid=5578 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:34.042000 audit[5578]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffca95d2b0 a2=0 a3=0 items=0 ppid=2508 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:34.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:34.044251 systemd-networkd[1681]: vethfb1046b: Link UP Oct 27 13:24:34.058114 kernel: eth0: renamed from vetha59c23b Oct 27 13:24:34.065904 kernel: docker0: port 1(vethfb1046b) entered blocking state Oct 27 13:24:34.065985 kernel: docker0: port 1(vethfb1046b) entered forwarding state Oct 27 13:24:34.066193 systemd-networkd[1681]: vethfb1046b: Gained carrier Oct 27 13:24:34.067062 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:35.091291 systemd[1]: docker-ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97.scope: Deactivated successfully. Oct 27 13:24:35.103089 containerd[1962]: time="2026-10-27T13:24:35.102949316Z" level=info msg="shim disconnected" id=ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97 namespace=moby Oct 27 13:24:35.103089 containerd[1962]: time="2026-10-27T13:24:35.102979314Z" level=info msg="cleaning up after shim disconnected" id=ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97 namespace=moby Oct 27 13:24:35.103089 containerd[1962]: time="2026-10-27T13:24:35.102984914Z" level=info msg="cleaning up dead shim" id=ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97 namespace=moby Oct 27 13:24:35.103429 dockerd[2508]: time="2026-10-27T13:24:35.103038975Z" level=info msg="ignoring event" container=ff35eade46d819a0e7656440b3813b9ff7d26ef69fc6ab47f2fc0c414fcc4e97 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:35.122741 systemd-networkd[1681]: vethfb1046b: Lost carrier Oct 27 13:24:35.125029 kernel: docker0: port 1(vethfb1046b) entered disabled state Oct 27 13:24:35.125070 kernel: vetha59c23b: renamed from eth0 Oct 27 13:24:35.136000 audit[5610]: NETFILTER_CFG table=raw:102 family=2 entries=1 op=nft_unregister_rule pid=5610 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:35.136000 audit[5610]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd6917940 a2=0 a3=0 items=0 ppid=2508 pid=5610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.136000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:35.142483 systemd-networkd[1681]: vethfb1046b: Link DOWN Oct 27 13:24:35.146110 kernel: docker0: port 1(vethfb1046b) entered disabled state Oct 27 13:24:35.154347 kernel: vethfb1046b (unregistering): left allmulticast mode Oct 27 13:24:35.154413 kernel: vethfb1046b (unregistering): left promiscuous mode Oct 27 13:24:35.141000 audit: ANOM_PROMISCUOUS dev=vethfb1046b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:35.158137 kernel: docker0: port 1(vethfb1046b) entered disabled state Oct 27 13:24:35.141000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3880 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.141000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:35.169367 systemd[1]: run-docker-netns-9701e9bef962.mount: Deactivated successfully. Oct 27 13:24:35.172786 systemd[1]: var-lib-docker-overlay2-d31672d2b630dd4f9deb26ea6bf21aa51c03326327090ba7a70531ef8758263b-merged.mount: Deactivated successfully. Oct 27 13:24:35.184000 audit: BPF prog-id=198 op=UNLOAD Oct 27 13:24:35.184000 audit: BPF prog-id=202 op=UNLOAD Oct 27 13:24:35.345943 containerd[1962]: time="2026-10-27T13:24:35.345531981Z" level=info msg="connecting to shim 6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355" address="unix:///run/containerd/s/74a1782c4d106a93550a26437e86e3901288d4e371110ad1130cc50cebe856c7" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:35.368272 systemd[1]: Started docker-6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355.scope - libcontainer container 6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355. Oct 27 13:24:35.376000 audit: BPF prog-id=203 op=LOAD Oct 27 13:24:35.376000 audit: BPF prog-id=204 op=LOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32786e395f90 a2=98 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=204 op=UNLOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=205 op=LOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32786e396268 a2=98 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=206 op=LOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=32786e395fa8 a2=98 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=206 op=UNLOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=205 op=UNLOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.376000 audit: BPF prog-id=207 op=LOAD Oct 27 13:24:35.376000 audit[5638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32786e3964b8 a2=98 a3=0 items=0 ppid=5627 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636366376465383033623165353832393138663137376234 Oct 27 13:24:35.390640 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:35.397399 kernel: docker0: port 1(veth10b7e43) entered blocking state Oct 27 13:24:35.397458 kernel: docker0: port 1(veth10b7e43) entered disabled state Oct 27 13:24:35.400269 kernel: veth10b7e43: entered allmulticast mode Oct 27 13:24:35.403057 kernel: veth10b7e43: entered promiscuous mode Oct 27 13:24:35.388000 audit: ANOM_PROMISCUOUS dev=veth10b7e43 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:35.388000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333920 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.388000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:35.405000 audit[5660]: NETFILTER_CFG table=raw:103 family=2 entries=1 op=nft_register_rule pid=5660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:35.405000 audit[5660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffc282540 a2=0 a3=0 items=0 ppid=2508 pid=5660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:35.405000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:35.407441 systemd-networkd[1681]: veth10b7e43: Link UP Oct 27 13:24:35.422131 kernel: eth0: renamed from veth87ff959 Oct 27 13:24:35.429110 kernel: docker0: port 1(veth10b7e43) entered blocking state Oct 27 13:24:35.429185 kernel: docker0: port 1(veth10b7e43) entered forwarding state Oct 27 13:24:35.429208 systemd-networkd[1681]: veth10b7e43: Gained carrier Oct 27 13:24:35.429715 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:35.576362 systemd[1]: Started sshd@39-13-10.0.0.24:22-109.160.32.131:34600.service - OpenSSH per-connection server daemon (109.160.32.131:34600). Oct 27 13:24:35.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-13-10.0.0.24:22-109.160.32.131:34600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:36.255769 sshd[5670]: Connection closed by authenticating user root 109.160.32.131 port 34600 [preauth] Oct 27 13:24:36.255000 audit[5670]: AUDIT1109 pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:36.257884 systemd[1]: sshd@39-13-10.0.0.24:22-109.160.32.131:34600.service: Deactivated successfully. Oct 27 13:24:36.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-13-10.0.0.24:22-109.160.32.131:34600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:36.454130 systemd[1]: docker-6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355.scope: Deactivated successfully. Oct 27 13:24:36.465395 containerd[1962]: time="2026-10-27T13:24:36.465143219Z" level=info msg="shim disconnected" id=6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355 namespace=moby Oct 27 13:24:36.465395 containerd[1962]: time="2026-10-27T13:24:36.465169665Z" level=info msg="cleaning up after shim disconnected" id=6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355 namespace=moby Oct 27 13:24:36.465395 containerd[1962]: time="2026-10-27T13:24:36.465175337Z" level=info msg="cleaning up dead shim" id=6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355 namespace=moby Oct 27 13:24:36.465719 dockerd[2508]: time="2026-10-27T13:24:36.465327295Z" level=info msg="ignoring event" container=6ccf7de803b1e582918f177b4e2f60d255b450aefdfe1de86703c3207a0bb355 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:36.486337 systemd-networkd[1681]: veth10b7e43: Lost carrier Oct 27 13:24:36.489482 kernel: docker0: port 1(veth10b7e43) entered disabled state Oct 27 13:24:36.489555 kernel: veth87ff959: renamed from eth0 Oct 27 13:24:36.500000 audit[5698]: NETFILTER_CFG table=raw:104 family=2 entries=1 op=nft_unregister_rule pid=5698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:36.500000 audit[5698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffebdd4300 a2=0 a3=0 items=0 ppid=2508 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.500000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:36.507529 systemd-networkd[1681]: veth10b7e43: Link DOWN Oct 27 13:24:36.512113 kernel: docker0: port 1(veth10b7e43) entered disabled state Oct 27 13:24:36.520274 kernel: veth10b7e43 (unregistering): left allmulticast mode Oct 27 13:24:36.520347 kernel: veth10b7e43 (unregistering): left promiscuous mode Oct 27 13:24:36.506000 audit: ANOM_PROMISCUOUS dev=veth10b7e43 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:36.523661 kernel: docker0: port 1(veth10b7e43) entered disabled state Oct 27 13:24:36.506000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c0bb7ca0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.506000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:36.537494 systemd[1]: run-docker-netns-a5e7743be0dd.mount: Deactivated successfully. Oct 27 13:24:36.540640 systemd[1]: var-lib-docker-overlay2-59150b4ee61927d7196086215acd6a60a9696df844d3bb4ce8d7b190c7f05fc5-merged.mount: Deactivated successfully. Oct 27 13:24:36.549000 audit: BPF prog-id=203 op=UNLOAD Oct 27 13:24:36.549000 audit: BPF prog-id=207 op=UNLOAD Oct 27 13:24:36.629659 systemd[1]: var-lib-docker-overlay2-fd36cf96259785a48860bd0cb19109b40e3a4b15d9525f6e6d5b7b5858f3c7cd\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:36.690901 containerd[1962]: time="2026-10-27T13:24:36.690859128Z" level=info msg="connecting to shim 27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3" address="unix:///run/containerd/s/e6b72e0dc38b57ce0b5b3e96174ce542c95846541cdbad2399d06381b4662dab" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:36.712318 systemd[1]: Started docker-27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3.scope - libcontainer container 27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3. Oct 27 13:24:36.719000 audit: BPF prog-id=208 op=LOAD Oct 27 13:24:36.720000 audit: BPF prog-id=209 op=LOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=252d66b9f90 a2=98 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.720000 audit: BPF prog-id=209 op=UNLOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.720000 audit: BPF prog-id=210 op=LOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=252d66ba268 a2=98 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.720000 audit: BPF prog-id=211 op=LOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=252d66b9fa8 a2=98 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.720000 audit: BPF prog-id=211 op=UNLOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.720000 audit: BPF prog-id=210 op=UNLOAD Oct 27 13:24:36.720000 audit[5727]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.721000 audit: BPF prog-id=212 op=LOAD Oct 27 13:24:36.721000 audit[5727]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=252d66ba4b8 a2=98 a3=0 items=0 ppid=5716 pid=5727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32376236333434393438613332363033373037313965343762 Oct 27 13:24:36.735256 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:36.742417 kernel: docker0: port 1(veth685d728) entered blocking state Oct 27 13:24:36.742490 kernel: docker0: port 1(veth685d728) entered disabled state Oct 27 13:24:36.745183 kernel: veth685d728: entered allmulticast mode Oct 27 13:24:36.747855 kernel: veth685d728: entered promiscuous mode Oct 27 13:24:36.734000 audit: ANOM_PROMISCUOUS dev=veth685d728 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:36.734000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0b9bce0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:36.751000 audit[5752]: NETFILTER_CFG table=raw:105 family=2 entries=1 op=nft_register_rule pid=5752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:36.751000 audit[5752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd34b1650 a2=0 a3=0 items=0 ppid=2508 pid=5752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:36.751000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:36.755087 systemd-networkd[1681]: veth685d728: Link UP Oct 27 13:24:36.769117 kernel: eth0: renamed from vethb42f971 Oct 27 13:24:36.776524 kernel: docker0: port 1(veth685d728) entered blocking state Oct 27 13:24:36.776585 kernel: docker0: port 1(veth685d728) entered forwarding state Oct 27 13:24:36.776796 systemd-networkd[1681]: veth685d728: Gained carrier Oct 27 13:24:36.777442 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:37.802151 systemd[1]: docker-27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3.scope: Deactivated successfully. Oct 27 13:24:37.814816 dockerd[2508]: time="2026-10-27T13:24:37.814779609Z" level=info msg="ignoring event" container=27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:37.815883 containerd[1962]: time="2026-10-27T13:24:37.815849632Z" level=info msg="shim disconnected" id=27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3 namespace=moby Oct 27 13:24:37.816325 containerd[1962]: time="2026-10-27T13:24:37.816172868Z" level=info msg="cleaning up after shim disconnected" id=27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3 namespace=moby Oct 27 13:24:37.816325 containerd[1962]: time="2026-10-27T13:24:37.816186283Z" level=info msg="cleaning up dead shim" id=27b6344948a3260370719e47b064e1a66858171f99f8590d462fbca34c6758c3 namespace=moby Oct 27 13:24:37.835305 systemd-networkd[1681]: veth685d728: Lost carrier Oct 27 13:24:37.836119 kernel: docker0: port 1(veth685d728) entered disabled state Oct 27 13:24:37.836157 kernel: vethb42f971: renamed from eth0 Oct 27 13:24:37.850000 audit[5782]: NETFILTER_CFG table=raw:106 family=2 entries=1 op=nft_unregister_rule pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:37.855075 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:37.855146 kernel: audit: type=1325 audit(1793107477.850:876): table=raw:106 family=2 entries=1 op=nft_unregister_rule pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:37.850000 audit[5782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffecbf4a90 a2=0 a3=0 items=0 ppid=2508 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:37.880631 kernel: audit: type=1300 audit(1793107477.850:876): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffecbf4a90 a2=0 a3=0 items=0 ppid=2508 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:37.850000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:37.881260 systemd-networkd[1681]: veth685d728: Link DOWN Oct 27 13:24:37.891489 kernel: audit: type=1327 audit(1793107477.850:876): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:37.891560 kernel: docker0: port 1(veth685d728) entered disabled state Oct 27 13:24:37.899456 kernel: veth685d728 (unregistering): left allmulticast mode Oct 27 13:24:37.902891 kernel: veth685d728 (unregistering): left promiscuous mode Oct 27 13:24:37.879000 audit: ANOM_PROMISCUOUS dev=veth685d728 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:37.907546 kernel: docker0: port 1(veth685d728) entered disabled state Oct 27 13:24:37.907578 kernel: audit: type=1700 audit(1793107477.879:877): dev=veth685d728 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:37.879000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:37.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:37.955701 kernel: audit: type=1300 audit(1793107477.879:877): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:37.955785 kernel: audit: type=1327 audit(1793107477.879:877): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:37.956548 systemd[1]: run-docker-netns-4a8895656f8b.mount: Deactivated successfully. Oct 27 13:24:37.961967 systemd[1]: var-lib-docker-overlay2-fd36cf96259785a48860bd0cb19109b40e3a4b15d9525f6e6d5b7b5858f3c7cd-merged.mount: Deactivated successfully. Oct 27 13:24:37.968000 audit: BPF prog-id=208 op=UNLOAD Oct 27 13:24:37.968000 audit: BPF prog-id=212 op=UNLOAD Oct 27 13:24:37.978192 kernel: audit: type=1334 audit(1793107477.968:878): prog-id=208 op=UNLOAD Oct 27 13:24:37.978252 kernel: audit: type=1334 audit(1793107477.968:879): prog-id=212 op=UNLOAD Oct 27 13:24:38.027430 systemd[1]: var-lib-docker-overlay2-9b1d90cef78859b71b37e17c7bd4b88af99fdfbbb3ffc891fe45f4e8c12ade93\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:38.095186 containerd[1962]: time="2026-10-27T13:24:38.094876908Z" level=info msg="connecting to shim 185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73" address="unix:///run/containerd/s/755a1d306054dc6967ac18f2f3fc2c4ffdd1f1f76cd3a28faee59d860833904f" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:38.112260 systemd[1]: Started docker-185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73.scope - libcontainer container 185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73. Oct 27 13:24:38.119000 audit: BPF prog-id=213 op=LOAD Oct 27 13:24:38.123000 audit: BPF prog-id=214 op=LOAD Oct 27 13:24:38.123000 audit[5810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=207ce3831f90 a2=98 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.126000 audit: BPF prog-id=214 op=UNLOAD Oct 27 13:24:38.126000 audit[5810]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.126000 audit: BPF prog-id=215 op=LOAD Oct 27 13:24:38.126000 audit[5810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=207ce3832268 a2=98 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.127000 audit: BPF prog-id=216 op=LOAD Oct 27 13:24:38.127000 audit[5810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=207ce3831fa8 a2=98 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.127000 audit: BPF prog-id=216 op=UNLOAD Oct 27 13:24:38.127000 audit[5810]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.127000 audit: BPF prog-id=215 op=UNLOAD Oct 27 13:24:38.127000 audit[5810]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.127000 audit: BPF prog-id=217 op=LOAD Oct 27 13:24:38.127000 audit[5810]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=207ce38324b8 a2=98 a3=0 items=0 ppid=5798 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383566643136613730376164306333363537663766613330 Oct 27 13:24:38.129798 kernel: audit: type=1334 audit(1793107478.119:880): prog-id=213 op=LOAD Oct 27 13:24:38.129861 kernel: audit: type=1334 audit(1793107478.123:881): prog-id=214 op=LOAD Oct 27 13:24:38.141163 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:38.147937 kernel: docker0: port 1(veth21d726e) entered blocking state Oct 27 13:24:38.148004 kernel: docker0: port 1(veth21d726e) entered disabled state Oct 27 13:24:38.150653 kernel: veth21d726e: entered allmulticast mode Oct 27 13:24:38.140000 audit: ANOM_PROMISCUOUS dev=veth21d726e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:38.154168 kernel: veth21d726e: entered promiscuous mode Oct 27 13:24:38.140000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c658c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.140000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:38.155000 audit[5835]: NETFILTER_CFG table=raw:107 family=2 entries=1 op=nft_register_rule pid=5835 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:38.155000 audit[5835]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffeab9b670 a2=0 a3=0 items=0 ppid=2508 pid=5835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:38.155000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:38.157092 systemd-networkd[1681]: veth21d726e: Link UP Oct 27 13:24:38.177555 kernel: eth0: renamed from veth0951f67 Oct 27 13:24:38.177670 kernel: docker0: port 1(veth21d726e) entered blocking state Oct 27 13:24:38.177613 systemd-networkd[1681]: veth21d726e: Gained carrier Oct 27 13:24:38.177759 kernel: docker0: port 1(veth21d726e) entered forwarding state Oct 27 13:24:38.178327 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:39.202149 systemd[1]: docker-185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73.scope: Deactivated successfully. Oct 27 13:24:39.213845 dockerd[2508]: time="2026-10-27T13:24:39.213797043Z" level=info msg="ignoring event" container=185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:39.214217 containerd[1962]: time="2026-10-27T13:24:39.213930755Z" level=info msg="shim disconnected" id=185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73 namespace=moby Oct 27 13:24:39.214217 containerd[1962]: time="2026-10-27T13:24:39.213955129Z" level=info msg="cleaning up after shim disconnected" id=185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73 namespace=moby Oct 27 13:24:39.214217 containerd[1962]: time="2026-10-27T13:24:39.213960713Z" level=info msg="cleaning up dead shim" id=185fd16a707ad0c3657f7fa3075d5ae30149687250f9a307eac3e24281387a73 namespace=moby Oct 27 13:24:39.233638 systemd-networkd[1681]: veth21d726e: Lost carrier Oct 27 13:24:39.235819 kernel: docker0: port 1(veth21d726e) entered disabled state Oct 27 13:24:39.235884 kernel: veth0951f67: renamed from eth0 Oct 27 13:24:39.254000 audit[5866]: NETFILTER_CFG table=raw:108 family=2 entries=1 op=nft_unregister_rule pid=5866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:39.254000 audit[5866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe81e6660 a2=0 a3=0 items=0 ppid=2508 pid=5866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.254000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:39.264677 systemd-networkd[1681]: veth21d726e: Link DOWN Oct 27 13:24:39.269202 kernel: docker0: port 1(veth21d726e) entered disabled state Oct 27 13:24:39.263000 audit: ANOM_PROMISCUOUS dev=veth21d726e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:39.278209 kernel: veth21d726e (unregistering): left allmulticast mode Oct 27 13:24:39.278235 kernel: veth21d726e (unregistering): left promiscuous mode Oct 27 13:24:39.278250 kernel: docker0: port 1(veth21d726e) entered disabled state Oct 27 13:24:39.263000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774220 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:39.290009 systemd[1]: run-docker-netns-496e580110f8.mount: Deactivated successfully. Oct 27 13:24:39.292739 systemd[1]: var-lib-docker-overlay2-9b1d90cef78859b71b37e17c7bd4b88af99fdfbbb3ffc891fe45f4e8c12ade93-merged.mount: Deactivated successfully. Oct 27 13:24:39.306000 audit: BPF prog-id=213 op=UNLOAD Oct 27 13:24:39.306000 audit: BPF prog-id=217 op=UNLOAD Oct 27 13:24:39.367087 systemd[1]: var-lib-docker-overlay2-6668d0a6bd5afea4d67f7dafcf4ca4d5b23851234d2be3fe10d5b482c2b38324\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:39.439538 containerd[1962]: time="2026-10-27T13:24:39.439502186Z" level=info msg="connecting to shim 8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea" address="unix:///run/containerd/s/eabfab2e8b99cc5b306efb8b4beb76cc6135bfafc2e0cd8253ab1da89a7d1c22" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:39.456252 systemd[1]: Started docker-8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea.scope - libcontainer container 8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea. Oct 27 13:24:39.464000 audit: BPF prog-id=218 op=LOAD Oct 27 13:24:39.464000 audit: BPF prog-id=219 op=LOAD Oct 27 13:24:39.464000 audit[5895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43c78e0d1f90 a2=98 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.464000 audit: BPF prog-id=219 op=UNLOAD Oct 27 13:24:39.464000 audit[5895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.464000 audit: BPF prog-id=220 op=LOAD Oct 27 13:24:39.464000 audit[5895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43c78e0d2268 a2=98 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.465000 audit: BPF prog-id=221 op=LOAD Oct 27 13:24:39.465000 audit[5895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=43c78e0d1fa8 a2=98 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.465000 audit: BPF prog-id=221 op=UNLOAD Oct 27 13:24:39.465000 audit[5895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.465000 audit: BPF prog-id=220 op=UNLOAD Oct 27 13:24:39.465000 audit[5895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.465000 audit: BPF prog-id=222 op=LOAD Oct 27 13:24:39.465000 audit[5895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43c78e0d24b8 a2=98 a3=0 items=0 ppid=5884 pid=5895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623561346130633932383163313561383432323631633335 Oct 27 13:24:39.485297 kernel: docker0: port 1(vethabc83d8) entered blocking state Oct 27 13:24:39.485379 kernel: docker0: port 1(vethabc83d8) entered disabled state Oct 27 13:24:39.488103 kernel: vethabc83d8: entered allmulticast mode Oct 27 13:24:39.490905 kernel: vethabc83d8: entered promiscuous mode Oct 27 13:24:39.476000 audit: ANOM_PROMISCUOUS dev=vethabc83d8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:39.476000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe9440 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.476000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:39.492677 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:39.496000 audit[5916]: NETFILTER_CFG table=raw:109 family=2 entries=1 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:39.496000 audit[5916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc0d9ad90 a2=0 a3=0 items=0 ppid=2508 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:39.496000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:39.498627 systemd-networkd[1681]: vethabc83d8: Link UP Oct 27 13:24:39.511122 kernel: eth0: renamed from vethc4097a8 Oct 27 13:24:39.518251 kernel: docker0: port 1(vethabc83d8) entered blocking state Oct 27 13:24:39.518316 kernel: docker0: port 1(vethabc83d8) entered forwarding state Oct 27 13:24:39.518589 systemd-networkd[1681]: vethabc83d8: Gained carrier Oct 27 13:24:39.519253 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:40.542786 systemd[1]: docker-8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea.scope: Deactivated successfully. Oct 27 13:24:40.554320 containerd[1962]: time="2026-10-27T13:24:40.554227108Z" level=info msg="shim disconnected" id=8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea namespace=moby Oct 27 13:24:40.554320 containerd[1962]: time="2026-10-27T13:24:40.554254242Z" level=info msg="cleaning up after shim disconnected" id=8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea namespace=moby Oct 27 13:24:40.554320 containerd[1962]: time="2026-10-27T13:24:40.554260362Z" level=info msg="cleaning up dead shim" id=8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea namespace=moby Oct 27 13:24:40.554878 dockerd[2508]: time="2026-10-27T13:24:40.554395585Z" level=info msg="ignoring event" container=8b5a4a0c9281c15a842261c3530c06a00a2dd1e8a6aa4ff8daac6802dfee61ea module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:40.577777 systemd-networkd[1681]: vethabc83d8: Lost carrier Oct 27 13:24:40.578381 kernel: docker0: port 1(vethabc83d8) entered disabled state Oct 27 13:24:40.578410 kernel: vethc4097a8: renamed from eth0 Oct 27 13:24:40.597000 audit[5947]: NETFILTER_CFG table=raw:110 family=2 entries=1 op=nft_unregister_rule pid=5947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:40.597000 audit[5947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd4a8e840 a2=0 a3=0 items=0 ppid=2508 pid=5947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.597000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:40.599600 systemd-networkd[1681]: vethabc83d8: Link DOWN Oct 27 13:24:40.607260 kernel: docker0: port 1(vethabc83d8) entered disabled state Oct 27 13:24:40.607325 kernel: vethabc83d8 (unregistering): left allmulticast mode Oct 27 13:24:40.610536 kernel: vethabc83d8 (unregistering): left promiscuous mode Oct 27 13:24:40.599000 audit: ANOM_PROMISCUOUS dev=vethabc83d8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:40.614262 kernel: docker0: port 1(vethabc83d8) entered disabled state Oct 27 13:24:40.599000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775160 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.599000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:40.625277 systemd[1]: run-docker-netns-72d1f3f70d07.mount: Deactivated successfully. Oct 27 13:24:40.628920 systemd[1]: var-lib-docker-overlay2-6668d0a6bd5afea4d67f7dafcf4ca4d5b23851234d2be3fe10d5b482c2b38324-merged.mount: Deactivated successfully. Oct 27 13:24:40.640000 audit: BPF prog-id=218 op=UNLOAD Oct 27 13:24:40.640000 audit: BPF prog-id=222 op=UNLOAD Oct 27 13:24:40.786518 containerd[1962]: time="2026-10-27T13:24:40.786446851Z" level=info msg="connecting to shim 688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48" address="unix:///run/containerd/s/5cd0e065c159472fe4daf4bfd823f5da6a97ac51503a5f86ef268e41e4268ec2" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:40.809455 systemd[1]: Started docker-688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48.scope - libcontainer container 688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48. Oct 27 13:24:40.817000 audit: BPF prog-id=223 op=LOAD Oct 27 13:24:40.817000 audit: BPF prog-id=224 op=LOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45861c443f90 a2=98 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=224 op=UNLOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=225 op=LOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45861c444268 a2=98 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=226 op=LOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=45861c443fa8 a2=98 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=226 op=UNLOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=225 op=UNLOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.817000 audit: BPF prog-id=227 op=LOAD Oct 27 13:24:40.817000 audit[5975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45861c4444b8 a2=98 a3=0 items=0 ppid=5964 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383865306663623339653339333261613630356237646536 Oct 27 13:24:40.830774 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:40.836547 kernel: docker0: port 1(vethc846242) entered blocking state Oct 27 13:24:40.836605 kernel: docker0: port 1(vethc846242) entered disabled state Oct 27 13:24:40.839514 kernel: vethc846242: entered allmulticast mode Oct 27 13:24:40.842186 kernel: vethc846242: entered promiscuous mode Oct 27 13:24:40.829000 audit: ANOM_PROMISCUOUS dev=vethc846242 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:40.829000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047080 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.829000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:40.845000 audit[5996]: NETFILTER_CFG table=raw:111 family=2 entries=1 op=nft_register_rule pid=5996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:40.845000 audit[5996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4d56270 a2=0 a3=0 items=0 ppid=2508 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:40.845000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:40.845978 systemd-networkd[1681]: vethc846242: Link UP Oct 27 13:24:40.866114 kernel: eth0: renamed from veth3b84d85 Oct 27 13:24:40.866186 kernel: docker0: port 1(vethc846242) entered blocking state Oct 27 13:24:40.866249 kernel: docker0: port 1(vethc846242) entered forwarding state Oct 27 13:24:40.866724 systemd-networkd[1681]: vethc846242: Gained carrier Oct 27 13:24:40.867071 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:41.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-14-10.0.0.24:22-109.160.32.131:43756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:41.323286 systemd[1]: Started sshd@40-14-10.0.0.24:22-109.160.32.131:43756.service - OpenSSH per-connection server daemon (109.160.32.131:43756). Oct 27 13:24:41.892846 systemd[1]: docker-688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48.scope: Deactivated successfully. Oct 27 13:24:41.904620 dockerd[2508]: time="2026-10-27T13:24:41.904512384Z" level=info msg="ignoring event" container=688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:41.905266 containerd[1962]: time="2026-10-27T13:24:41.905233331Z" level=info msg="shim disconnected" id=688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48 namespace=moby Oct 27 13:24:41.905266 containerd[1962]: time="2026-10-27T13:24:41.905261185Z" level=info msg="cleaning up after shim disconnected" id=688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48 namespace=moby Oct 27 13:24:41.905266 containerd[1962]: time="2026-10-27T13:24:41.905267337Z" level=info msg="cleaning up dead shim" id=688e0fcb39e3932aa605b7de60bbcfabc83060428c7c7750d0be354d65df0d48 namespace=moby Oct 27 13:24:41.926155 kernel: docker0: port 1(vethc846242) entered disabled state Oct 27 13:24:41.926374 systemd-networkd[1681]: vethc846242: Lost carrier Oct 27 13:24:41.930120 kernel: veth3b84d85: renamed from eth0 Oct 27 13:24:41.943000 audit[6031]: NETFILTER_CFG table=raw:112 family=2 entries=1 op=nft_unregister_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:41.943000 audit[6031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff4cf6720 a2=0 a3=0 items=0 ppid=2508 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:41.943000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:41.951460 systemd-networkd[1681]: vethc846242: Link DOWN Oct 27 13:24:41.955112 kernel: docker0: port 1(vethc846242) entered disabled state Oct 27 13:24:41.962484 kernel: vethc846242 (unregistering): left allmulticast mode Oct 27 13:24:41.962537 kernel: vethc846242 (unregistering): left promiscuous mode Oct 27 13:24:41.950000 audit: ANOM_PROMISCUOUS dev=vethc846242 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:41.965743 kernel: docker0: port 1(vethc846242) entered disabled state Oct 27 13:24:41.950000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1be0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:41.950000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:41.976143 systemd[1]: run-docker-netns-6b931cc3e393.mount: Deactivated successfully. Oct 27 13:24:41.979001 systemd[1]: var-lib-docker-overlay2-d7678dc7cb1975c44be18e514c46ab7d195a00447db5bdd8cc0987fa5553bedd-merged.mount: Deactivated successfully. Oct 27 13:24:41.985000 audit: BPF prog-id=223 op=UNLOAD Oct 27 13:24:41.985000 audit: BPF prog-id=227 op=UNLOAD Oct 27 13:24:42.078310 systemd[1]: var-lib-docker-overlay2-4f2b8ea4080206e62e0480f9421d8c1bfdf79f6ba4e68885a0cbe7d9f15c876c\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:42.144307 containerd[1962]: time="2026-10-27T13:24:42.143800717Z" level=info msg="connecting to shim 1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db" address="unix:///run/containerd/s/c39429302695b0e526cf05598454f86db9f5d8b2f68a7adcdad7e105a995a4c0" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:42.163257 systemd[1]: Started docker-1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db.scope - libcontainer container 1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db. Oct 27 13:24:42.170000 audit: BPF prog-id=228 op=LOAD Oct 27 13:24:42.171000 audit: BPF prog-id=229 op=LOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=75a9d188df90 a2=98 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=229 op=UNLOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=230 op=LOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=75a9d188e268 a2=98 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=231 op=LOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=75a9d188dfa8 a2=98 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=231 op=UNLOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=230 op=UNLOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.171000 audit: BPF prog-id=232 op=LOAD Oct 27 13:24:42.171000 audit[6059]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=75a9d188e4b8 a2=98 a3=0 items=0 ppid=6047 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353133393036653535396361313564373434306665353836 Oct 27 13:24:42.191453 kernel: docker0: port 1(veth188d6c1) entered blocking state Oct 27 13:24:42.191540 kernel: docker0: port 1(veth188d6c1) entered disabled state Oct 27 13:24:42.194274 kernel: veth188d6c1: entered allmulticast mode Oct 27 13:24:42.197361 kernel: veth188d6c1: entered promiscuous mode Oct 27 13:24:42.183000 audit: ANOM_PROMISCUOUS dev=veth188d6c1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:42.183000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332030 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.183000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:42.198899 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:42.199000 audit[6080]: NETFILTER_CFG table=raw:113 family=2 entries=1 op=nft_register_rule pid=6080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:42.199000 audit[6080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff4d814e0 a2=0 a3=0 items=0 ppid=2508 pid=6080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:42.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:42.200796 systemd-networkd[1681]: veth188d6c1: Link UP Oct 27 13:24:42.216132 kernel: eth0: renamed from vethcfc538e Oct 27 13:24:42.223279 kernel: docker0: port 1(veth188d6c1) entered blocking state Oct 27 13:24:42.223349 kernel: docker0: port 1(veth188d6c1) entered forwarding state Oct 27 13:24:42.223637 systemd-networkd[1681]: veth188d6c1: Gained carrier Oct 27 13:24:42.223832 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:42.828691 sshd[6005]: Invalid user steam from 109.160.32.131 port 43756 Oct 27 13:24:43.249684 systemd[1]: docker-1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db.scope: Deactivated successfully. Oct 27 13:24:43.262111 containerd[1962]: time="2026-10-27T13:24:43.262051966Z" level=info msg="shim disconnected" id=1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db namespace=moby Oct 27 13:24:43.262567 containerd[1962]: time="2026-10-27T13:24:43.262085652Z" level=info msg="cleaning up after shim disconnected" id=1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db namespace=moby Oct 27 13:24:43.262567 containerd[1962]: time="2026-10-27T13:24:43.262567973Z" level=info msg="cleaning up dead shim" id=1513906e559ca15d7440fe5867290fd4f45668ec0a709d0c65b8e3816e5524db namespace=moby Oct 27 13:24:43.283184 kernel: docker0: port 1(veth188d6c1) entered disabled state Oct 27 13:24:43.283241 systemd-networkd[1681]: veth188d6c1: Lost carrier Oct 27 13:24:43.287111 kernel: vethcfc538e: renamed from eth0 Oct 27 13:24:43.301000 audit[6110]: NETFILTER_CFG table=raw:114 family=2 entries=1 op=nft_unregister_rule pid=6110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:43.305685 kernel: kauditd_printk_skb: 135 callbacks suppressed Oct 27 13:24:43.305747 kernel: audit: type=1325 audit(1793107483.301:933): table=raw:114 family=2 entries=1 op=nft_unregister_rule pid=6110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:43.301000 audit[6110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3ef9320 a2=0 a3=0 items=0 ppid=2508 pid=6110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.301000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:43.342544 kernel: audit: type=1300 audit(1793107483.301:933): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3ef9320 a2=0 a3=0 items=0 ppid=2508 pid=6110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.342634 kernel: audit: type=1327 audit(1793107483.301:933): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:43.343198 systemd-networkd[1681]: veth188d6c1: Link DOWN Oct 27 13:24:43.347130 kernel: docker0: port 1(veth188d6c1) entered disabled state Oct 27 13:24:43.354746 kernel: veth188d6c1 (unregistering): left allmulticast mode Oct 27 13:24:43.354820 kernel: veth188d6c1 (unregistering): left promiscuous mode Oct 27 13:24:43.331000 audit: ANOM_PROMISCUOUS dev=veth188d6c1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:43.359217 kernel: docker0: port 1(veth188d6c1) entered disabled state Oct 27 13:24:43.359243 kernel: audit: type=1700 audit(1793107483.331:934): dev=veth188d6c1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:43.331000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159a920 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.376754 systemd[1]: run-docker-netns-05c8b6431571.mount: Deactivated successfully. Oct 27 13:24:43.331000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:43.397509 systemd[1]: var-lib-docker-overlay2-4f2b8ea4080206e62e0480f9421d8c1bfdf79f6ba4e68885a0cbe7d9f15c876c-merged.mount: Deactivated successfully. Oct 27 13:24:43.405123 kernel: audit: type=1300 audit(1793107483.331:934): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159a920 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.405241 kernel: audit: type=1327 audit(1793107483.331:934): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:43.415000 audit: BPF prog-id=228 op=UNLOAD Oct 27 13:24:43.419000 audit: BPF prog-id=232 op=UNLOAD Oct 27 13:24:43.436452 kernel: audit: type=1334 audit(1793107483.415:935): prog-id=228 op=UNLOAD Oct 27 13:24:43.436509 kernel: audit: type=1334 audit(1793107483.419:936): prog-id=232 op=UNLOAD Oct 27 13:24:43.544664 sshd[6005]: Connection closed by invalid user steam 109.160.32.131 port 43756 [preauth] Oct 27 13:24:43.543000 audit[6005]: AUDIT1109 pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:43.547210 systemd[1]: sshd@40-14-10.0.0.24:22-109.160.32.131:43756.service: Deactivated successfully. Oct 27 13:24:43.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-14-10.0.0.24:22-109.160.32.131:43756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:43.573159 kernel: audit: type=1109 audit(1793107483.543:937): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:43.573263 kernel: audit: type=1131 audit(1793107483.548:938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-14-10.0.0.24:22-109.160.32.131:43756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:43.574410 containerd[1962]: time="2026-10-27T13:24:43.574328690Z" level=info msg="connecting to shim 77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168" address="unix:///run/containerd/s/76f6e6b37214ce4a0b9aa89925b8da01f4dc8c4c30679a582d3247f2d73a0a4c" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:43.591336 systemd[1]: Started docker-77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168.scope - libcontainer container 77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168. Oct 27 13:24:43.599000 audit: BPF prog-id=233 op=LOAD Oct 27 13:24:43.599000 audit: BPF prog-id=234 op=LOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=50df0c2fbf90 a2=98 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=234 op=UNLOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=235 op=LOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=50df0c2fc268 a2=98 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=236 op=LOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=50df0c2fbfa8 a2=98 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=236 op=UNLOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=235 op=UNLOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.599000 audit: BPF prog-id=237 op=LOAD Oct 27 13:24:43.599000 audit[6140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=50df0c2fc4b8 a2=98 a3=0 items=0 ppid=6129 pid=6140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373537356539616636363536383732353761643631383763 Oct 27 13:24:43.613159 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:43.620184 kernel: docker0: port 1(veth5122832) entered blocking state Oct 27 13:24:43.620251 kernel: docker0: port 1(veth5122832) entered disabled state Oct 27 13:24:43.623118 kernel: veth5122832: entered allmulticast mode Oct 27 13:24:43.625975 kernel: veth5122832: entered promiscuous mode Oct 27 13:24:43.612000 audit: ANOM_PROMISCUOUS dev=veth5122832 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:43.612000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121ed80 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.612000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:43.627000 audit[6166]: NETFILTER_CFG table=raw:115 family=2 entries=1 op=nft_register_rule pid=6166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:43.627000 audit[6166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff0016140 a2=0 a3=0 items=0 ppid=2508 pid=6166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:43.627000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:43.629706 systemd-networkd[1681]: veth5122832: Link UP Oct 27 13:24:43.643114 kernel: eth0: renamed from veth8aee6ec Oct 27 13:24:43.650476 kernel: docker0: port 1(veth5122832) entered blocking state Oct 27 13:24:43.650552 kernel: docker0: port 1(veth5122832) entered forwarding state Oct 27 13:24:43.650832 systemd-networkd[1681]: veth5122832: Gained carrier Oct 27 13:24:43.651538 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:44.676382 systemd[1]: docker-77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168.scope: Deactivated successfully. Oct 27 13:24:44.688497 dockerd[2508]: time="2026-10-27T13:24:44.688461836Z" level=info msg="ignoring event" container=77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:44.689333 containerd[1962]: time="2026-10-27T13:24:44.689182223Z" level=info msg="shim disconnected" id=77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168 namespace=moby Oct 27 13:24:44.689333 containerd[1962]: time="2026-10-27T13:24:44.689215221Z" level=info msg="cleaning up after shim disconnected" id=77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168 namespace=moby Oct 27 13:24:44.689333 containerd[1962]: time="2026-10-27T13:24:44.689221517Z" level=info msg="cleaning up dead shim" id=77575e9af665687257ad6187c8847360f6d9dc26f50aedb133565f386e4cd168 namespace=moby Oct 27 13:24:44.709748 systemd-networkd[1681]: veth5122832: Lost carrier Oct 27 13:24:44.710116 kernel: docker0: port 1(veth5122832) entered disabled state Oct 27 13:24:44.713110 kernel: veth8aee6ec: renamed from eth0 Oct 27 13:24:44.732000 audit[6199]: NETFILTER_CFG table=raw:116 family=2 entries=1 op=nft_unregister_rule pid=6199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:44.732000 audit[6199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff9df2210 a2=0 a3=0 items=0 ppid=2508 pid=6199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.732000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:44.746518 systemd-networkd[1681]: veth5122832: Link DOWN Oct 27 13:24:44.753678 kernel: docker0: port 1(veth5122832) entered disabled state Oct 27 13:24:44.753731 kernel: veth5122832 (unregistering): left allmulticast mode Oct 27 13:24:44.754132 kernel: veth5122832 (unregistering): left promiscuous mode Oct 27 13:24:44.745000 audit: ANOM_PROMISCUOUS dev=veth5122832 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:44.761082 kernel: docker0: port 1(veth5122832) entered disabled state Oct 27 13:24:44.745000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c0b11460 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:44.772180 systemd[1]: run-docker-netns-28a84e38ee7b.mount: Deactivated successfully. Oct 27 13:24:44.774815 systemd[1]: var-lib-docker-overlay2-64071259bbda84823b141ee6153eaf193b07d831609649526c069459f6b68b32-merged.mount: Deactivated successfully. Oct 27 13:24:44.785000 audit: BPF prog-id=233 op=UNLOAD Oct 27 13:24:44.785000 audit: BPF prog-id=237 op=UNLOAD Oct 27 13:24:44.929928 containerd[1962]: time="2026-10-27T13:24:44.929514404Z" level=info msg="connecting to shim 1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62" address="unix:///run/containerd/s/1e55f6d8edccd37c2bc3a7f14f640eb3d847c6456581642580e122db9940c0bc" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:44.947238 systemd[1]: Started docker-1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62.scope - libcontainer container 1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62. Oct 27 13:24:44.954000 audit: BPF prog-id=238 op=LOAD Oct 27 13:24:44.954000 audit: BPF prog-id=239 op=LOAD Oct 27 13:24:44.954000 audit[6227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4b7c0a533f90 a2=98 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.954000 audit: BPF prog-id=239 op=UNLOAD Oct 27 13:24:44.954000 audit[6227]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.955000 audit: BPF prog-id=240 op=LOAD Oct 27 13:24:44.955000 audit[6227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4b7c0a534268 a2=98 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.955000 audit: BPF prog-id=241 op=LOAD Oct 27 13:24:44.955000 audit[6227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=4b7c0a533fa8 a2=98 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.955000 audit: BPF prog-id=241 op=UNLOAD Oct 27 13:24:44.955000 audit[6227]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.955000 audit: BPF prog-id=240 op=UNLOAD Oct 27 13:24:44.955000 audit[6227]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.955000 audit: BPF prog-id=242 op=LOAD Oct 27 13:24:44.955000 audit[6227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4b7c0a5344b8 a2=98 a3=0 items=0 ppid=6216 pid=6227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31616537646436323861396362383630336366333434363262 Oct 27 13:24:44.972226 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:44.977695 kernel: docker0: port 1(veth89a05ad) entered blocking state Oct 27 13:24:44.977773 kernel: docker0: port 1(veth89a05ad) entered disabled state Oct 27 13:24:44.982171 kernel: veth89a05ad: entered allmulticast mode Oct 27 13:24:44.967000 audit: ANOM_PROMISCUOUS dev=veth89a05ad prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:44.967000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64030 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:44.986972 kernel: veth89a05ad: entered promiscuous mode Oct 27 13:24:44.986000 audit[6248]: NETFILTER_CFG table=raw:117 family=2 entries=1 op=nft_register_rule pid=6248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:44.986000 audit[6248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff2479490 a2=0 a3=0 items=0 ppid=2508 pid=6248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:44.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:44.987762 systemd-networkd[1681]: veth89a05ad: Link UP Oct 27 13:24:45.005108 kernel: eth0: renamed from veth62219b7 Oct 27 13:24:45.005188 kernel: docker0: port 1(veth89a05ad) entered blocking state Oct 27 13:24:45.005216 kernel: docker0: port 1(veth89a05ad) entered forwarding state Oct 27 13:24:45.007324 systemd-networkd[1681]: veth89a05ad: Gained carrier Oct 27 13:24:45.008247 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:46.033508 systemd[1]: docker-1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62.scope: Deactivated successfully. Oct 27 13:24:46.046867 containerd[1962]: time="2026-10-27T13:24:46.046837534Z" level=info msg="shim disconnected" id=1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62 namespace=moby Oct 27 13:24:46.047202 dockerd[2508]: time="2026-10-27T13:24:46.046857133Z" level=info msg="ignoring event" container=1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:46.047457 containerd[1962]: time="2026-10-27T13:24:46.047432929Z" level=info msg="cleaning up after shim disconnected" id=1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62 namespace=moby Oct 27 13:24:46.047516 containerd[1962]: time="2026-10-27T13:24:46.047503644Z" level=info msg="cleaning up dead shim" id=1ae7dd628a9cb8603cf34462bc577b1e70b75a66b1540e47e5c5646d48f9cf62 namespace=moby Oct 27 13:24:46.069543 systemd-networkd[1681]: veth89a05ad: Lost carrier Oct 27 13:24:46.072135 kernel: docker0: port 1(veth89a05ad) entered disabled state Oct 27 13:24:46.072163 kernel: veth62219b7: renamed from eth0 Oct 27 13:24:46.084000 audit[6278]: NETFILTER_CFG table=raw:118 family=2 entries=1 op=nft_unregister_rule pid=6278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:46.084000 audit[6278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc2bbfa00 a2=0 a3=0 items=0 ppid=2508 pid=6278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.084000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:46.093606 systemd-networkd[1681]: veth89a05ad: Link DOWN Oct 27 13:24:46.100823 kernel: docker0: port 1(veth89a05ad) entered disabled state Oct 27 13:24:46.100883 kernel: veth89a05ad (unregistering): left allmulticast mode Oct 27 13:24:46.104357 kernel: veth89a05ad (unregistering): left promiscuous mode Oct 27 13:24:46.092000 audit: ANOM_PROMISCUOUS dev=veth89a05ad prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:46.108193 kernel: docker0: port 1(veth89a05ad) entered disabled state Oct 27 13:24:46.092000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c0dc1ae0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.092000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:46.120151 systemd[1]: run-docker-netns-c41b9d2dedd4.mount: Deactivated successfully. Oct 27 13:24:46.123882 systemd[1]: var-lib-docker-overlay2-607ed778193ffa0d48fab76acd4000b0b0e7b0c263ac20700f1d034d8eeae429-merged.mount: Deactivated successfully. Oct 27 13:24:46.132000 audit: BPF prog-id=238 op=UNLOAD Oct 27 13:24:46.132000 audit: BPF prog-id=242 op=UNLOAD Oct 27 13:24:46.287177 containerd[1962]: time="2026-10-27T13:24:46.287055579Z" level=info msg="connecting to shim a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9" address="unix:///run/containerd/s/9d18254cf3d33f5892cf223b2f1c13f0f36894428f674a42d6dc94bdb188c2fa" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:46.305257 systemd[1]: Started docker-a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9.scope - libcontainer container a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9. Oct 27 13:24:46.312000 audit: BPF prog-id=243 op=LOAD Oct 27 13:24:46.312000 audit: BPF prog-id=244 op=LOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=17e683815f90 a2=98 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=244 op=UNLOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=245 op=LOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=17e683816268 a2=98 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=246 op=LOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=17e683815fa8 a2=98 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=246 op=UNLOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=245 op=UNLOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.312000 audit: BPF prog-id=247 op=LOAD Oct 27 13:24:46.312000 audit[6306]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=17e6838164b8 a2=98 a3=0 items=0 ppid=6295 pid=6306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61363331643133663862616562366537333732336265373431 Oct 27 13:24:46.327208 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:46.333981 kernel: docker0: port 1(veth1e9ac39) entered blocking state Oct 27 13:24:46.334053 kernel: docker0: port 1(veth1e9ac39) entered disabled state Oct 27 13:24:46.336682 kernel: veth1e9ac39: entered allmulticast mode Oct 27 13:24:46.339406 kernel: veth1e9ac39: entered promiscuous mode Oct 27 13:24:46.325000 audit: ANOM_PROMISCUOUS dev=veth1e9ac39 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:46.325000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333aa0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.325000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:46.340000 audit[6327]: NETFILTER_CFG table=raw:119 family=2 entries=1 op=nft_register_rule pid=6327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:46.340000 audit[6327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4447c20 a2=0 a3=0 items=0 ppid=2508 pid=6327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:46.340000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:46.342094 systemd-networkd[1681]: veth1e9ac39: Link UP Oct 27 13:24:46.356113 kernel: eth0: renamed from veth59eb8cd Oct 27 13:24:46.363035 kernel: docker0: port 1(veth1e9ac39) entered blocking state Oct 27 13:24:46.363111 kernel: docker0: port 1(veth1e9ac39) entered forwarding state Oct 27 13:24:46.363321 systemd-networkd[1681]: veth1e9ac39: Gained carrier Oct 27 13:24:46.367680 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:47.391667 systemd[1]: docker-a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9.scope: Deactivated successfully. Oct 27 13:24:47.403818 containerd[1962]: time="2026-10-27T13:24:47.403780003Z" level=info msg="shim disconnected" id=a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9 namespace=moby Oct 27 13:24:47.404413 containerd[1962]: time="2026-10-27T13:24:47.404149764Z" level=info msg="cleaning up after shim disconnected" id=a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9 namespace=moby Oct 27 13:24:47.404413 containerd[1962]: time="2026-10-27T13:24:47.404168523Z" level=info msg="cleaning up dead shim" id=a631d13f8baeb6e73723be741750e1a4f8a2e578b929db6d97b69cbe206c26f9 namespace=moby Oct 27 13:24:47.423926 systemd-networkd[1681]: veth1e9ac39: Lost carrier Oct 27 13:24:47.426197 kernel: docker0: port 1(veth1e9ac39) entered disabled state Oct 27 13:24:47.426268 kernel: veth59eb8cd: renamed from eth0 Oct 27 13:24:47.443000 audit[6356]: NETFILTER_CFG table=raw:120 family=2 entries=1 op=nft_unregister_rule pid=6356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:47.443000 audit[6356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3564810 a2=0 a3=0 items=0 ppid=2508 pid=6356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:47.448512 systemd-networkd[1681]: veth1e9ac39: Link DOWN Oct 27 13:24:47.452122 kernel: docker0: port 1(veth1e9ac39) entered disabled state Oct 27 13:24:47.459773 kernel: veth1e9ac39 (unregistering): left allmulticast mode Oct 27 13:24:47.459843 kernel: veth1e9ac39 (unregistering): left promiscuous mode Oct 27 13:24:47.447000 audit: ANOM_PROMISCUOUS dev=veth1e9ac39 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:47.463423 kernel: docker0: port 1(veth1e9ac39) entered disabled state Oct 27 13:24:47.447000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a4080 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.447000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:47.475320 systemd[1]: run-docker-netns-93b8eb263fcd.mount: Deactivated successfully. Oct 27 13:24:47.477801 systemd[1]: var-lib-docker-overlay2-c90dfd3d9a2e0568e8cd28528add7b1c4c4fb388fa0f2e985c214af55b074a9f-merged.mount: Deactivated successfully. Oct 27 13:24:47.486000 audit: BPF prog-id=243 op=UNLOAD Oct 27 13:24:47.486000 audit: BPF prog-id=247 op=UNLOAD Oct 27 13:24:47.569716 systemd[1]: var-lib-docker-overlay2-e7ed47cda07c6ce55bfc435b7e69abd6b9b6231e139788dc914ccb34e8f61d8a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:47.634553 containerd[1962]: time="2026-10-27T13:24:47.634458971Z" level=info msg="connecting to shim 3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af" address="unix:///run/containerd/s/01798b02c82b4a9466dd229087f718cf440a91e88bc9f6a0056206d7de6aac72" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:47.656271 systemd[1]: Started docker-3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af.scope - libcontainer container 3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af. Oct 27 13:24:47.664000 audit: BPF prog-id=248 op=LOAD Oct 27 13:24:47.664000 audit: BPF prog-id=249 op=LOAD Oct 27 13:24:47.664000 audit[6382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=77bd74f31f90 a2=98 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.664000 audit: BPF prog-id=249 op=UNLOAD Oct 27 13:24:47.664000 audit[6382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.665000 audit: BPF prog-id=250 op=LOAD Oct 27 13:24:47.665000 audit[6382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=77bd74f32268 a2=98 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.665000 audit: BPF prog-id=251 op=LOAD Oct 27 13:24:47.665000 audit[6382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=77bd74f31fa8 a2=98 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.665000 audit: BPF prog-id=251 op=UNLOAD Oct 27 13:24:47.665000 audit[6382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.665000 audit: BPF prog-id=250 op=UNLOAD Oct 27 13:24:47.665000 audit[6382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.665000 audit: BPF prog-id=252 op=LOAD Oct 27 13:24:47.665000 audit[6382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=77bd74f324b8 a2=98 a3=0 items=0 ppid=6371 pid=6382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33623465666539663734343066626466616537326465623234 Oct 27 13:24:47.680684 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:47.688606 kernel: docker0: port 1(veth284fb8c) entered blocking state Oct 27 13:24:47.688683 kernel: docker0: port 1(veth284fb8c) entered disabled state Oct 27 13:24:47.691906 kernel: veth284fb8c: entered allmulticast mode Oct 27 13:24:47.694114 kernel: veth284fb8c: entered promiscuous mode Oct 27 13:24:47.679000 audit: ANOM_PROMISCUOUS dev=veth284fb8c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:47.679000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c653b0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.679000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:47.696000 audit[6404]: NETFILTER_CFG table=raw:121 family=2 entries=1 op=nft_register_rule pid=6404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:47.696000 audit[6404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd96139b0 a2=0 a3=0 items=0 ppid=2508 pid=6404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:47.696000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:47.698600 systemd-networkd[1681]: veth284fb8c: Link UP Oct 27 13:24:47.714120 kernel: eth0: renamed from vethd7ede66 Oct 27 13:24:47.720775 kernel: docker0: port 1(veth284fb8c) entered blocking state Oct 27 13:24:47.720838 kernel: docker0: port 1(veth284fb8c) entered forwarding state Oct 27 13:24:47.720995 systemd-networkd[1681]: veth284fb8c: Gained carrier Oct 27 13:24:47.721592 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:47.935882 systemd[1]: Started sshd@41-15-10.0.0.24:22-109.160.32.131:43882.service - OpenSSH per-connection server daemon (109.160.32.131:43882). Oct 27 13:24:47.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-15-10.0.0.24:22-109.160.32.131:43882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:48.746854 systemd[1]: docker-3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af.scope: Deactivated successfully. Oct 27 13:24:48.759212 containerd[1962]: time="2026-10-27T13:24:48.759039025Z" level=info msg="shim disconnected" id=3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af namespace=moby Oct 27 13:24:48.759212 containerd[1962]: time="2026-10-27T13:24:48.759073527Z" level=info msg="cleaning up after shim disconnected" id=3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af namespace=moby Oct 27 13:24:48.759212 containerd[1962]: time="2026-10-27T13:24:48.759108701Z" level=info msg="cleaning up dead shim" id=3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af namespace=moby Oct 27 13:24:48.759534 dockerd[2508]: time="2026-10-27T13:24:48.759143146Z" level=info msg="ignoring event" container=3b4efe9f7440fbdfae72deb2498e03a5192d64d23f4ac0b69bbfbf4506d8e0af module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:48.779366 systemd-networkd[1681]: veth284fb8c: Lost carrier Oct 27 13:24:48.780129 kernel: docker0: port 1(veth284fb8c) entered disabled state Oct 27 13:24:48.783123 kernel: vethd7ede66: renamed from eth0 Oct 27 13:24:48.797000 audit[6438]: NETFILTER_CFG table=raw:122 family=2 entries=1 op=nft_unregister_rule pid=6438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:48.801932 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:48.802006 kernel: audit: type=1325 audit(1793107488.797:992): table=raw:122 family=2 entries=1 op=nft_unregister_rule pid=6438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:48.797000 audit[6438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2694390 a2=0 a3=0 items=0 ppid=2508 pid=6438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:48.829543 kernel: audit: type=1300 audit(1793107488.797:992): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2694390 a2=0 a3=0 items=0 ppid=2508 pid=6438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:48.830797 systemd-networkd[1681]: veth284fb8c: Link DOWN Oct 27 13:24:48.797000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:48.834959 kernel: docker0: port 1(veth284fb8c) entered disabled state Oct 27 13:24:48.835000 kernel: audit: type=1327 audit(1793107488.797:992): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:48.851574 kernel: veth284fb8c (unregistering): left allmulticast mode Oct 27 13:24:48.856215 kernel: veth284fb8c (unregistering): left promiscuous mode Oct 27 13:24:48.829000 audit: ANOM_PROMISCUOUS dev=veth284fb8c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:48.860727 kernel: docker0: port 1(veth284fb8c) entered disabled state Oct 27 13:24:48.860755 kernel: audit: type=1700 audit(1793107488.829:993): dev=veth284fb8c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:48.829000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a38e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:48.829000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:48.908506 kernel: audit: type=1300 audit(1793107488.829:993): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a38e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:48.908596 kernel: audit: type=1327 audit(1793107488.829:993): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:48.910213 systemd[1]: run-docker-netns-658f1de7b387.mount: Deactivated successfully. Oct 27 13:24:48.914584 systemd[1]: var-lib-docker-overlay2-e7ed47cda07c6ce55bfc435b7e69abd6b9b6231e139788dc914ccb34e8f61d8a-merged.mount: Deactivated successfully. Oct 27 13:24:48.919000 audit: BPF prog-id=248 op=UNLOAD Oct 27 13:24:48.919000 audit: BPF prog-id=252 op=UNLOAD Oct 27 13:24:48.929261 kernel: audit: type=1334 audit(1793107488.919:994): prog-id=248 op=UNLOAD Oct 27 13:24:48.929315 kernel: audit: type=1334 audit(1793107488.919:995): prog-id=252 op=UNLOAD Oct 27 13:24:49.045057 containerd[1962]: time="2026-10-27T13:24:49.044891398Z" level=info msg="connecting to shim a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3" address="unix:///run/containerd/s/ecb846bb85c63ff433801ee0e08cdecda00b0e1f860a97d762bd565a49e7576a" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:49.062256 systemd[1]: Started docker-a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3.scope - libcontainer container a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3. Oct 27 13:24:49.069000 audit: BPF prog-id=253 op=LOAD Oct 27 13:24:49.074000 audit: BPF prog-id=254 op=LOAD Oct 27 13:24:49.079162 kernel: audit: type=1334 audit(1793107489.069:996): prog-id=253 op=LOAD Oct 27 13:24:49.079230 kernel: audit: type=1334 audit(1793107489.074:997): prog-id=254 op=LOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5631dd4adf90 a2=98 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=254 op=UNLOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=255 op=LOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5631dd4ae268 a2=98 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=256 op=LOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5631dd4adfa8 a2=98 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=256 op=UNLOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=255 op=UNLOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.074000 audit: BPF prog-id=257 op=LOAD Oct 27 13:24:49.074000 audit[6467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5631dd4ae4b8 a2=98 a3=0 items=0 ppid=6455 pid=6467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313361336566643036393937626431666533646162636638 Oct 27 13:24:49.099538 kernel: docker0: port 1(vethe9e679c) entered blocking state Oct 27 13:24:49.099625 kernel: docker0: port 1(vethe9e679c) entered disabled state Oct 27 13:24:49.099648 kernel: vethe9e679c: entered allmulticast mode Oct 27 13:24:49.104738 kernel: vethe9e679c: entered promiscuous mode Oct 27 13:24:49.090000 audit: ANOM_PROMISCUOUS dev=vethe9e679c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:49.090000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c65c80 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.090000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:49.106499 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:49.107000 audit[6489]: NETFILTER_CFG table=raw:123 family=2 entries=1 op=nft_register_rule pid=6489 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:49.107000 audit[6489]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd0d11580 a2=0 a3=0 items=0 ppid=2508 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:49.107000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:49.110195 systemd-networkd[1681]: vethe9e679c: Link UP Oct 27 13:24:49.125118 kernel: eth0: renamed from veth00f3c8e Oct 27 13:24:49.132643 kernel: docker0: port 1(vethe9e679c) entered blocking state Oct 27 13:24:49.132718 kernel: docker0: port 1(vethe9e679c) entered forwarding state Oct 27 13:24:49.132695 systemd-networkd[1681]: vethe9e679c: Gained carrier Oct 27 13:24:49.133398 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:49.749478 sshd[6413]: Invalid user vpn from 109.160.32.131 port 43882 Oct 27 13:24:50.158183 systemd[1]: docker-a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3.scope: Deactivated successfully. Oct 27 13:24:50.173245 dockerd[2508]: time="2026-10-27T13:24:50.173198432Z" level=info msg="ignoring event" container=a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:50.174030 containerd[1962]: time="2026-10-27T13:24:50.173980576Z" level=info msg="shim disconnected" id=a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3 namespace=moby Oct 27 13:24:50.174030 containerd[1962]: time="2026-10-27T13:24:50.174029325Z" level=info msg="cleaning up after shim disconnected" id=a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3 namespace=moby Oct 27 13:24:50.174307 containerd[1962]: time="2026-10-27T13:24:50.174036285Z" level=info msg="cleaning up dead shim" id=a13a3efd06997bd1fe3dabcf80f59a794d2d3255e18d53547fc768191b8dbdf3 namespace=moby Oct 27 13:24:50.193909 systemd-networkd[1681]: vethe9e679c: Lost carrier Oct 27 13:24:50.194600 kernel: docker0: port 1(vethe9e679c) entered disabled state Oct 27 13:24:50.198121 kernel: veth00f3c8e: renamed from eth0 Oct 27 13:24:50.212000 audit[6518]: NETFILTER_CFG table=raw:124 family=2 entries=1 op=nft_unregister_rule pid=6518 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:50.212000 audit[6518]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc684d4d0 a2=0 a3=0 items=0 ppid=2508 pid=6518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.212000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:50.219564 systemd-networkd[1681]: vethe9e679c: Link DOWN Oct 27 13:24:50.226823 kernel: docker0: port 1(vethe9e679c) entered disabled state Oct 27 13:24:50.226891 kernel: vethe9e679c (unregistering): left allmulticast mode Oct 27 13:24:50.230662 kernel: vethe9e679c (unregistering): left promiscuous mode Oct 27 13:24:50.218000 audit: ANOM_PROMISCUOUS dev=vethe9e679c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:50.234329 kernel: docker0: port 1(vethe9e679c) entered disabled state Oct 27 13:24:50.242964 sshd[6413]: Connection closed by invalid user vpn 109.160.32.131 port 43882 [preauth] Oct 27 13:24:50.218000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774b80 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:50.242000 audit[6413]: AUDIT1109 pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:50.245405 systemd[1]: sshd@41-15-10.0.0.24:22-109.160.32.131:43882.service: Deactivated successfully. Oct 27 13:24:50.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-15-10.0.0.24:22-109.160.32.131:43882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:50.249667 systemd[1]: run-docker-netns-0a85b0f98ac5.mount: Deactivated successfully. Oct 27 13:24:50.252620 systemd[1]: var-lib-docker-overlay2-623bbae1ac857a69c2be47f6ea448fbbd37553859f31f585ff12c0c3c9124603-merged.mount: Deactivated successfully. Oct 27 13:24:50.258000 audit: BPF prog-id=253 op=UNLOAD Oct 27 13:24:50.258000 audit: BPF prog-id=257 op=UNLOAD Oct 27 13:24:50.344414 systemd[1]: var-lib-docker-overlay2-9c7d45065744398a2d9406e08b2dde537a85b2596b64ff9e59348d0187eb162c-merged.mount: Deactivated successfully. Oct 27 13:24:50.387738 containerd[1962]: time="2026-10-27T13:24:50.387695733Z" level=info msg="connecting to shim 66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409" address="unix:///run/containerd/s/6379d0e4a722217d89e1ff36c7c5dbdf91044bfe71d990c79b7049d1129b50fc" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:50.409287 systemd[1]: Started docker-66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409.scope - libcontainer container 66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409. Oct 27 13:24:50.416000 audit: BPF prog-id=258 op=LOAD Oct 27 13:24:50.416000 audit: BPF prog-id=259 op=LOAD Oct 27 13:24:50.416000 audit[6550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5c889259ff90 a2=98 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=259 op=UNLOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=260 op=LOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5c88925a0268 a2=98 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=261 op=LOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5c889259ffa8 a2=98 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=261 op=UNLOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=260 op=UNLOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.417000 audit: BPF prog-id=262 op=LOAD Oct 27 13:24:50.417000 audit[6550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5c88925a04b8 a2=98 a3=0 items=0 ppid=6538 pid=6550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366330373264623732336536303161336432316465643764 Oct 27 13:24:50.437247 kernel: docker0: port 1(vethbb82465) entered blocking state Oct 27 13:24:50.437382 kernel: docker0: port 1(vethbb82465) entered disabled state Oct 27 13:24:50.440087 kernel: vethbb82465: entered allmulticast mode Oct 27 13:24:50.443039 kernel: vethbb82465: entered promiscuous mode Oct 27 13:24:50.429000 audit: ANOM_PROMISCUOUS dev=vethbb82465 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:50.429000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1473590 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:50.444000 audit[6570]: NETFILTER_CFG table=raw:125 family=2 entries=1 op=nft_register_rule pid=6570 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:50.444000 audit[6570]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffedcfe750 a2=0 a3=0 items=0 ppid=2508 pid=6570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:50.444000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:50.445025 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:50.445891 systemd-networkd[1681]: vethbb82465: Link UP Oct 27 13:24:50.463375 kernel: eth0: renamed from vethfbeee8b Oct 27 13:24:50.463452 kernel: docker0: port 1(vethbb82465) entered blocking state Oct 27 13:24:50.466972 kernel: docker0: port 1(vethbb82465) entered forwarding state Oct 27 13:24:50.467269 systemd-networkd[1681]: vethbb82465: Gained carrier Oct 27 13:24:50.468197 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:51.493760 systemd[1]: docker-66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409.scope: Deactivated successfully. Oct 27 13:24:51.506317 dockerd[2508]: time="2026-10-27T13:24:51.506205927Z" level=info msg="ignoring event" container=66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:51.506938 containerd[1962]: time="2026-10-27T13:24:51.506656299Z" level=info msg="shim disconnected" id=66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409 namespace=moby Oct 27 13:24:51.506938 containerd[1962]: time="2026-10-27T13:24:51.506691321Z" level=info msg="cleaning up after shim disconnected" id=66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409 namespace=moby Oct 27 13:24:51.506938 containerd[1962]: time="2026-10-27T13:24:51.506698137Z" level=info msg="cleaning up dead shim" id=66c072db723e601a3d21ded7d7815747d18337673a39e81a45b001cdf2229409 namespace=moby Oct 27 13:24:51.526709 systemd-networkd[1681]: vethbb82465: Lost carrier Oct 27 13:24:51.527116 kernel: docker0: port 1(vethbb82465) entered disabled state Oct 27 13:24:51.530125 kernel: vethfbeee8b: renamed from eth0 Oct 27 13:24:51.545000 audit[6601]: NETFILTER_CFG table=raw:126 family=2 entries=1 op=nft_unregister_rule pid=6601 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:51.545000 audit[6601]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcb7c9f30 a2=0 a3=0 items=0 ppid=2508 pid=6601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.545000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:51.549538 systemd-networkd[1681]: vethbb82465: Link DOWN Oct 27 13:24:51.557778 kernel: docker0: port 1(vethbb82465) entered disabled state Oct 27 13:24:51.557844 kernel: vethbb82465 (unregistering): left allmulticast mode Oct 27 13:24:51.561806 kernel: vethbb82465 (unregistering): left promiscuous mode Oct 27 13:24:51.548000 audit: ANOM_PROMISCUOUS dev=vethbb82465 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:51.565128 kernel: docker0: port 1(vethbb82465) entered disabled state Oct 27 13:24:51.548000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775800 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.548000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:51.575399 systemd[1]: run-docker-netns-74231b6bd238.mount: Deactivated successfully. Oct 27 13:24:51.580216 systemd[1]: var-lib-docker-overlay2-9c7d45065744398a2d9406e08b2dde537a85b2596b64ff9e59348d0187eb162c-merged.mount: Deactivated successfully. Oct 27 13:24:51.592000 audit: BPF prog-id=258 op=UNLOAD Oct 27 13:24:51.592000 audit: BPF prog-id=262 op=UNLOAD Oct 27 13:24:51.686481 systemd[1]: var-lib-docker-overlay2-3b67ec69912377b08aee799caf9504d9425827e225b466236b113126223a299a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:51.744962 containerd[1962]: time="2026-10-27T13:24:51.744793402Z" level=info msg="connecting to shim 0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696" address="unix:///run/containerd/s/38675a3e002b1fcd49da9b11c90b80f7dddd90f353e652c7ec7729fb68672a74" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:51.767254 systemd[1]: Started docker-0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696.scope - libcontainer container 0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696. Oct 27 13:24:51.774000 audit: BPF prog-id=263 op=LOAD Oct 27 13:24:51.775000 audit: BPF prog-id=264 op=LOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=49a1fd90df90 a2=98 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=264 op=UNLOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=265 op=LOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=49a1fd90e268 a2=98 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=266 op=LOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=49a1fd90dfa8 a2=98 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=266 op=UNLOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=265 op=UNLOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.775000 audit: BPF prog-id=267 op=LOAD Oct 27 13:24:51.775000 audit[6630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=49a1fd90e4b8 a2=98 a3=0 items=0 ppid=6617 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30616236383136656161303231633738316237386438623537 Oct 27 13:24:51.795549 kernel: docker0: port 1(veth947e99c) entered blocking state Oct 27 13:24:51.795636 kernel: docker0: port 1(veth947e99c) entered disabled state Oct 27 13:24:51.798402 kernel: veth947e99c: entered allmulticast mode Oct 27 13:24:51.801285 kernel: veth947e99c: entered promiscuous mode Oct 27 13:24:51.787000 audit: ANOM_PROMISCUOUS dev=veth947e99c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:51.787000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e480 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.787000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:51.802806 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:51.803000 audit[6653]: NETFILTER_CFG table=raw:127 family=2 entries=1 op=nft_register_rule pid=6653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:51.803000 audit[6653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff58a3010 a2=0 a3=0 items=0 ppid=2508 pid=6653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:51.803000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:51.804989 systemd-networkd[1681]: veth947e99c: Link UP Oct 27 13:24:51.817120 kernel: eth0: renamed from veth33ebb08 Oct 27 13:24:51.824504 kernel: docker0: port 1(veth947e99c) entered blocking state Oct 27 13:24:51.824567 kernel: docker0: port 1(veth947e99c) entered forwarding state Oct 27 13:24:51.824886 systemd-networkd[1681]: veth947e99c: Gained carrier Oct 27 13:24:51.825536 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:52.457370 systemd[1]: Started sshd@42-16-10.0.0.24:22-109.160.32.131:54530.service - OpenSSH per-connection server daemon (109.160.32.131:54530). Oct 27 13:24:52.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-16-10.0.0.24:22-109.160.32.131:54530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:52.848813 systemd[1]: docker-0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696.scope: Deactivated successfully. Oct 27 13:24:52.859823 dockerd[2508]: time="2026-10-27T13:24:52.859759916Z" level=info msg="ignoring event" container=0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:52.860448 containerd[1962]: time="2026-10-27T13:24:52.860415236Z" level=info msg="shim disconnected" id=0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696 namespace=moby Oct 27 13:24:52.860448 containerd[1962]: time="2026-10-27T13:24:52.860449386Z" level=info msg="cleaning up after shim disconnected" id=0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696 namespace=moby Oct 27 13:24:52.860744 containerd[1962]: time="2026-10-27T13:24:52.860455577Z" level=info msg="cleaning up dead shim" id=0ab6816eaa021c781b78d8b57840506dfd6254a9b2d2f1d40e59d21864d25696 namespace=moby Oct 27 13:24:52.881105 kernel: veth33ebb08: renamed from eth0 Oct 27 13:24:52.881183 kernel: docker0: port 1(veth947e99c) entered disabled state Oct 27 13:24:52.883194 systemd-networkd[1681]: veth947e99c: Lost carrier Oct 27 13:24:52.895000 audit[6690]: NETFILTER_CFG table=raw:128 family=2 entries=1 op=nft_unregister_rule pid=6690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:52.895000 audit[6690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc529ba50 a2=0 a3=0 items=0 ppid=2508 pid=6690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:52.895000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:52.905469 systemd-networkd[1681]: veth947e99c: Link DOWN Oct 27 13:24:52.909119 kernel: docker0: port 1(veth947e99c) entered disabled state Oct 27 13:24:52.916237 kernel: veth947e99c (unregistering): left allmulticast mode Oct 27 13:24:52.916295 kernel: veth947e99c (unregistering): left promiscuous mode Oct 27 13:24:52.904000 audit: ANOM_PROMISCUOUS dev=veth947e99c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:52.919968 kernel: docker0: port 1(veth947e99c) entered disabled state Oct 27 13:24:52.904000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053c60 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:52.904000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:52.930882 systemd[1]: run-docker-netns-f6e574773d50.mount: Deactivated successfully. Oct 27 13:24:52.933392 systemd[1]: var-lib-docker-overlay2-3b67ec69912377b08aee799caf9504d9425827e225b466236b113126223a299a-merged.mount: Deactivated successfully. Oct 27 13:24:52.943000 audit: BPF prog-id=263 op=UNLOAD Oct 27 13:24:52.943000 audit: BPF prog-id=267 op=UNLOAD Oct 27 13:24:53.089843 containerd[1962]: time="2026-10-27T13:24:53.089800978Z" level=info msg="connecting to shim db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385" address="unix:///run/containerd/s/cc83b910381555dff3556d9a194c16be228e6f130526eab38bf4a67ba0f5ffc3" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:53.106287 systemd[1]: Started docker-db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385.scope - libcontainer container db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385. Oct 27 13:24:53.114000 audit: BPF prog-id=268 op=LOAD Oct 27 13:24:53.115000 audit: BPF prog-id=269 op=LOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7084945bdf90 a2=98 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=269 op=UNLOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=270 op=LOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7084945be268 a2=98 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=271 op=LOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7084945bdfa8 a2=98 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=271 op=UNLOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=270 op=UNLOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.115000 audit: BPF prog-id=272 op=LOAD Oct 27 13:24:53.115000 audit[6719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7084945be4b8 a2=98 a3=0 items=0 ppid=6708 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623661363039346138336262613733636233633365346139 Oct 27 13:24:53.134304 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:53.138957 kernel: docker0: port 1(vetha758db4) entered blocking state Oct 27 13:24:53.139123 kernel: docker0: port 1(vetha758db4) entered disabled state Oct 27 13:24:53.141923 kernel: vetha758db4: entered allmulticast mode Oct 27 13:24:53.128000 audit: ANOM_PROMISCUOUS dev=vetha758db4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:53.145639 kernel: vetha758db4: entered promiscuous mode Oct 27 13:24:53.128000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047dd0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.128000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:53.146000 audit[6740]: NETFILTER_CFG table=raw:129 family=2 entries=1 op=nft_register_rule pid=6740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:53.146000 audit[6740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffb6841e0 a2=0 a3=0 items=0 ppid=2508 pid=6740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:53.146000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:53.148269 systemd-networkd[1681]: vetha758db4: Link UP Oct 27 13:24:53.162113 kernel: eth0: renamed from vetha995a8d Oct 27 13:24:53.169485 kernel: docker0: port 1(vetha758db4) entered blocking state Oct 27 13:24:53.169546 kernel: docker0: port 1(vetha758db4) entered forwarding state Oct 27 13:24:53.169768 systemd-networkd[1681]: vetha758db4: Gained carrier Oct 27 13:24:53.170568 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:54.164905 sshd[6663]: Invalid user deploy from 109.160.32.131 port 54530 Oct 27 13:24:54.195429 systemd[1]: docker-db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385.scope: Deactivated successfully. Oct 27 13:24:54.207862 containerd[1962]: time="2026-10-27T13:24:54.207827473Z" level=info msg="shim disconnected" id=db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385 namespace=moby Oct 27 13:24:54.207862 containerd[1962]: time="2026-10-27T13:24:54.207855999Z" level=info msg="cleaning up after shim disconnected" id=db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385 namespace=moby Oct 27 13:24:54.207862 containerd[1962]: time="2026-10-27T13:24:54.207861967Z" level=info msg="cleaning up dead shim" id=db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385 namespace=moby Oct 27 13:24:54.208536 dockerd[2508]: time="2026-10-27T13:24:54.208488856Z" level=info msg="ignoring event" container=db6a6094a83bba73cb3c3e4a99b907092fadbf39aad4f4b15d371fda520d7385 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:54.228854 systemd-networkd[1681]: vetha758db4: Lost carrier Oct 27 13:24:54.229732 kernel: docker0: port 1(vetha758db4) entered disabled state Oct 27 13:24:54.229793 kernel: vetha995a8d: renamed from eth0 Oct 27 13:24:54.242000 audit[6772]: NETFILTER_CFG table=raw:130 family=2 entries=1 op=nft_unregister_rule pid=6772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:54.246488 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:54.246557 kernel: audit: type=1325 audit(1793107494.242:1051): table=raw:130 family=2 entries=1 op=nft_unregister_rule pid=6772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:54.242000 audit[6772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcdddaa90 a2=0 a3=0 items=0 ppid=2508 pid=6772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.271417 kernel: audit: type=1300 audit(1793107494.242:1051): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcdddaa90 a2=0 a3=0 items=0 ppid=2508 pid=6772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.242000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:54.282529 kernel: audit: type=1327 audit(1793107494.242:1051): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:54.284729 systemd-networkd[1681]: vetha758db4: Link DOWN Oct 27 13:24:54.288179 kernel: docker0: port 1(vetha758db4) entered disabled state Oct 27 13:24:54.295727 kernel: vetha758db4 (unregistering): left allmulticast mode Oct 27 13:24:54.283000 audit: ANOM_PROMISCUOUS dev=vetha758db4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:54.299246 kernel: vetha758db4 (unregistering): left promiscuous mode Oct 27 13:24:54.299272 kernel: docker0: port 1(vetha758db4) entered disabled state Oct 27 13:24:54.299287 kernel: audit: type=1700 audit(1793107494.283:1052): dev=vetha758db4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:54.283000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce080 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.283000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:54.341252 kernel: audit: type=1300 audit(1793107494.283:1052): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce080 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.341308 kernel: audit: type=1327 audit(1793107494.283:1052): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:54.343320 systemd[1]: run-docker-netns-d303c0fd7959.mount: Deactivated successfully. Oct 27 13:24:54.348900 systemd[1]: var-lib-docker-overlay2-4b904eb201d7b64925186b020775958835327db42e4bac8f40c8ddbac1057995-merged.mount: Deactivated successfully. Oct 27 13:24:54.356000 audit: BPF prog-id=268 op=UNLOAD Oct 27 13:24:54.360000 audit: BPF prog-id=272 op=UNLOAD Oct 27 13:24:54.384550 kernel: audit: type=1334 audit(1793107494.356:1053): prog-id=268 op=UNLOAD Oct 27 13:24:54.384606 kernel: audit: type=1334 audit(1793107494.360:1054): prog-id=272 op=UNLOAD Oct 27 13:24:54.506766 containerd[1962]: time="2026-10-27T13:24:54.506582992Z" level=info msg="connecting to shim fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754" address="unix:///run/containerd/s/f9addb474a460ff2c247eb495aa8abdc2a64ce8b1bd90125106a54e54b87a560" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:54.529258 systemd[1]: Started docker-fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754.scope - libcontainer container fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754. Oct 27 13:24:54.536000 audit: BPF prog-id=273 op=LOAD Oct 27 13:24:54.542118 kernel: audit: type=1334 audit(1793107494.536:1055): prog-id=273 op=LOAD Oct 27 13:24:54.541000 audit: BPF prog-id=274 op=LOAD Oct 27 13:24:54.541000 audit[6803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18a07c037f90 a2=98 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.545000 audit: BPF prog-id=274 op=UNLOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.545000 audit: BPF prog-id=275 op=LOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18a07c038268 a2=98 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.545000 audit: BPF prog-id=276 op=LOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=18a07c037fa8 a2=98 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.545000 audit: BPF prog-id=276 op=UNLOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.545000 audit: BPF prog-id=275 op=UNLOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.547242 kernel: audit: type=1334 audit(1793107494.541:1056): prog-id=274 op=LOAD Oct 27 13:24:54.545000 audit: BPF prog-id=277 op=LOAD Oct 27 13:24:54.545000 audit[6803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18a07c0384b8 a2=98 a3=0 items=0 ppid=6792 pid=6803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653639626336386138373565633965633766633161623933 Oct 27 13:24:54.566258 kernel: docker0: port 1(veth139da89) entered blocking state Oct 27 13:24:54.566325 kernel: docker0: port 1(veth139da89) entered disabled state Oct 27 13:24:54.569026 kernel: veth139da89: entered allmulticast mode Oct 27 13:24:54.572004 kernel: veth139da89: entered promiscuous mode Oct 27 13:24:54.558000 audit: ANOM_PROMISCUOUS dev=veth139da89 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:54.558000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e780 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.558000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:54.572912 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:54.574000 audit[6824]: NETFILTER_CFG table=raw:131 family=2 entries=1 op=nft_register_rule pid=6824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:54.574000 audit[6824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffe0b3230 a2=0 a3=0 items=0 ppid=2508 pid=6824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:54.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:54.575976 systemd-networkd[1681]: veth139da89: Link UP Oct 27 13:24:54.593254 kernel: eth0: renamed from vethd467c91 Oct 27 13:24:54.593343 kernel: docker0: port 1(veth139da89) entered blocking state Oct 27 13:24:54.593365 kernel: docker0: port 1(veth139da89) entered forwarding state Oct 27 13:24:54.596622 systemd-networkd[1681]: veth139da89: Gained carrier Oct 27 13:24:54.597207 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:54.795019 sshd[6663]: Connection closed by invalid user deploy 109.160.32.131 port 54530 [preauth] Oct 27 13:24:54.794000 audit[6663]: AUDIT1109 pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:54.797155 systemd[1]: sshd@42-16-10.0.0.24:22-109.160.32.131:54530.service: Deactivated successfully. Oct 27 13:24:54.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-16-10.0.0.24:22-109.160.32.131:54530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:55.622881 systemd[1]: docker-fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754.scope: Deactivated successfully. Oct 27 13:24:55.634281 dockerd[2508]: time="2026-10-27T13:24:55.634187821Z" level=info msg="ignoring event" container=fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:55.635260 containerd[1962]: time="2026-10-27T13:24:55.635217374Z" level=info msg="shim disconnected" id=fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754 namespace=moby Oct 27 13:24:55.635260 containerd[1962]: time="2026-10-27T13:24:55.635253732Z" level=info msg="cleaning up after shim disconnected" id=fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754 namespace=moby Oct 27 13:24:55.635260 containerd[1962]: time="2026-10-27T13:24:55.635260411Z" level=info msg="cleaning up dead shim" id=fe69bc68a875ec9ec7fc1ab93f07a0da7852d687cef70e1ee870912b5aed5754 namespace=moby Oct 27 13:24:55.655602 systemd-networkd[1681]: veth139da89: Lost carrier Oct 27 13:24:55.656443 kernel: docker0: port 1(veth139da89) entered disabled state Oct 27 13:24:55.656498 kernel: vethd467c91: renamed from eth0 Oct 27 13:24:55.673000 audit[6858]: NETFILTER_CFG table=raw:132 family=2 entries=1 op=nft_unregister_rule pid=6858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:55.673000 audit[6858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd84a3120 a2=0 a3=0 items=0 ppid=2508 pid=6858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.673000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:55.680573 systemd-networkd[1681]: veth139da89: Link DOWN Oct 27 13:24:55.684123 kernel: docker0: port 1(veth139da89) entered disabled state Oct 27 13:24:55.693755 kernel: veth139da89 (unregistering): left allmulticast mode Oct 27 13:24:55.693827 kernel: veth139da89 (unregistering): left promiscuous mode Oct 27 13:24:55.679000 audit: ANOM_PROMISCUOUS dev=veth139da89 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:55.697591 kernel: docker0: port 1(veth139da89) entered disabled state Oct 27 13:24:55.679000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ceea0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.679000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:55.710322 systemd[1]: run-docker-netns-c191971f0000.mount: Deactivated successfully. Oct 27 13:24:55.713640 systemd[1]: var-lib-docker-overlay2-e3636c9aba022ca3f2fdec51ed674d2682f5d30e4a879499c4d0acf45fc784ff-merged.mount: Deactivated successfully. Oct 27 13:24:55.727000 audit: BPF prog-id=273 op=UNLOAD Oct 27 13:24:55.727000 audit: BPF prog-id=277 op=UNLOAD Oct 27 13:24:55.839319 containerd[1962]: time="2026-10-27T13:24:55.839254954Z" level=info msg="connecting to shim 6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205" address="unix:///run/containerd/s/388b8fc676c6cc92adfff7b0d821ecb70ae312d7fcd1ae20ac51abd7561dc2b2" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:55.857469 systemd[1]: Started docker-6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205.scope - libcontainer container 6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205. Oct 27 13:24:55.864000 audit: BPF prog-id=278 op=LOAD Oct 27 13:24:55.864000 audit: BPF prog-id=279 op=LOAD Oct 27 13:24:55.864000 audit[6886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5560f1d43f90 a2=98 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.864000 audit: BPF prog-id=279 op=UNLOAD Oct 27 13:24:55.864000 audit[6886]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.865000 audit: BPF prog-id=280 op=LOAD Oct 27 13:24:55.865000 audit[6886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5560f1d44268 a2=98 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.865000 audit: BPF prog-id=281 op=LOAD Oct 27 13:24:55.865000 audit[6886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5560f1d43fa8 a2=98 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.865000 audit: BPF prog-id=281 op=UNLOAD Oct 27 13:24:55.865000 audit[6886]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.865000 audit: BPF prog-id=280 op=UNLOAD Oct 27 13:24:55.865000 audit[6886]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.865000 audit: BPF prog-id=282 op=LOAD Oct 27 13:24:55.865000 audit[6886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5560f1d444b8 a2=98 a3=0 items=0 ppid=6874 pid=6886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36383735623166393730333533373262656439323764666261 Oct 27 13:24:55.880201 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:55.886003 kernel: docker0: port 1(veth915c6fa) entered blocking state Oct 27 13:24:55.886082 kernel: docker0: port 1(veth915c6fa) entered disabled state Oct 27 13:24:55.888695 kernel: veth915c6fa: entered allmulticast mode Oct 27 13:24:55.891390 kernel: veth915c6fa: entered promiscuous mode Oct 27 13:24:55.878000 audit: ANOM_PROMISCUOUS dev=veth915c6fa prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:55.878000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f4a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.878000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:55.892000 audit[6908]: NETFILTER_CFG table=raw:133 family=2 entries=1 op=nft_register_rule pid=6908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:55.892000 audit[6908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcee65430 a2=0 a3=0 items=0 ppid=2508 pid=6908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:55.892000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:55.893814 systemd-networkd[1681]: veth915c6fa: Link UP Oct 27 13:24:55.911179 kernel: eth0: renamed from vethd1ee93f Oct 27 13:24:55.911246 kernel: docker0: port 1(veth915c6fa) entered blocking state Oct 27 13:24:55.914737 kernel: docker0: port 1(veth915c6fa) entered forwarding state Oct 27 13:24:55.915061 systemd-networkd[1681]: veth915c6fa: Gained carrier Oct 27 13:24:55.915265 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:56.940273 systemd[1]: docker-6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205.scope: Deactivated successfully. Oct 27 13:24:56.951060 containerd[1962]: time="2026-10-27T13:24:56.950802155Z" level=info msg="shim disconnected" id=6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205 namespace=moby Oct 27 13:24:56.951060 containerd[1962]: time="2026-10-27T13:24:56.950829706Z" level=info msg="cleaning up after shim disconnected" id=6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205 namespace=moby Oct 27 13:24:56.951060 containerd[1962]: time="2026-10-27T13:24:56.950834650Z" level=info msg="cleaning up dead shim" id=6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205 namespace=moby Oct 27 13:24:56.951405 dockerd[2508]: time="2026-10-27T13:24:56.951004975Z" level=info msg="ignoring event" container=6875b1f97035372bed927dfba2f65393b407fc2f5bd67ffcbd291cb981e0b205 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:56.971071 systemd-networkd[1681]: veth915c6fa: Lost carrier Oct 27 13:24:56.974042 kernel: docker0: port 1(veth915c6fa) entered disabled state Oct 27 13:24:56.974067 kernel: vethd1ee93f: renamed from eth0 Oct 27 13:24:56.991000 audit[6939]: NETFILTER_CFG table=raw:134 family=2 entries=1 op=nft_unregister_rule pid=6939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:56.991000 audit[6939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe19d86b0 a2=0 a3=0 items=0 ppid=2508 pid=6939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:56.991000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:56.997493 systemd-networkd[1681]: veth915c6fa: Link DOWN Oct 27 13:24:57.002114 kernel: docker0: port 1(veth915c6fa) entered disabled state Oct 27 13:24:57.009362 kernel: veth915c6fa (unregistering): left allmulticast mode Oct 27 13:24:57.009438 kernel: veth915c6fa (unregistering): left promiscuous mode Oct 27 13:24:56.997000 audit: ANOM_PROMISCUOUS dev=veth915c6fa prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:57.013015 kernel: docker0: port 1(veth915c6fa) entered disabled state Oct 27 13:24:56.997000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cfec0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:56.997000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:57.027227 systemd[1]: run-docker-netns-083a4e7718c5.mount: Deactivated successfully. Oct 27 13:24:57.031658 systemd[1]: var-lib-docker-overlay2-1fd4f63436c1e961127e35b658cd11c793f8ada9bb8f8e11525b1c336df240d3-merged.mount: Deactivated successfully. Oct 27 13:24:57.041000 audit: BPF prog-id=278 op=UNLOAD Oct 27 13:24:57.041000 audit: BPF prog-id=282 op=UNLOAD Oct 27 13:24:57.119643 systemd[1]: var-lib-docker-overlay2-8525c3e27da93c16ad26606e798d5ffc8a31d906e6a29860eff6b3c7f25a646a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:24:57.188556 containerd[1962]: time="2026-10-27T13:24:57.188515741Z" level=info msg="connecting to shim e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620" address="unix:///run/containerd/s/0e1f4d94521778f4aa1dff9e6d64daac93d082dad3e8a7672a8f7c60513f5e8c" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:57.205456 systemd[1]: Started docker-e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620.scope - libcontainer container e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620. Oct 27 13:24:57.215000 audit: BPF prog-id=283 op=LOAD Oct 27 13:24:57.215000 audit: BPF prog-id=284 op=LOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3a592a231f90 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=284 op=UNLOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=285 op=LOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3a592a232268 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=286 op=LOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3a592a231fa8 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=286 op=UNLOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=285 op=UNLOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.215000 audit: BPF prog-id=287 op=LOAD Oct 27 13:24:57.215000 audit[6970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3a592a2324b8 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396261663436356536663536396633643563663736386230 Oct 27 13:24:57.230133 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:57.235935 kernel: docker0: port 1(vethaa34b05) entered blocking state Oct 27 13:24:57.236020 kernel: docker0: port 1(vethaa34b05) entered disabled state Oct 27 13:24:57.238617 kernel: vethaa34b05: entered allmulticast mode Oct 27 13:24:57.241706 kernel: vethaa34b05: entered promiscuous mode Oct 27 13:24:57.229000 audit: ANOM_PROMISCUOUS dev=vethaa34b05 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:57.229000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe8b10 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.229000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:57.245000 audit[6991]: NETFILTER_CFG table=raw:135 family=2 entries=1 op=nft_register_rule pid=6991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:57.245000 audit[6991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffed4ad000 a2=0 a3=0 items=0 ppid=2508 pid=6991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:57.245000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:57.245956 systemd-networkd[1681]: vethaa34b05: Link UP Oct 27 13:24:57.262359 kernel: eth0: renamed from veth927a4fa Oct 27 13:24:57.262441 kernel: docker0: port 1(vethaa34b05) entered blocking state Oct 27 13:24:57.265830 kernel: docker0: port 1(vethaa34b05) entered forwarding state Oct 27 13:24:57.266164 systemd-networkd[1681]: vethaa34b05: Gained carrier Oct 27 13:24:57.266776 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:57.722574 systemd[1]: Started sshd@43-4124-10.0.0.24:22-109.160.32.131:54602.service - OpenSSH per-connection server daemon (109.160.32.131:54602). Oct 27 13:24:57.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-4124-10.0.0.24:22-109.160.32.131:54602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:58.292588 systemd[1]: docker-e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620.scope: Deactivated successfully. Oct 27 13:24:58.304756 dockerd[2508]: time="2026-10-27T13:24:58.304680765Z" level=info msg="ignoring event" container=e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:58.305436 containerd[1962]: time="2026-10-27T13:24:58.305254802Z" level=info msg="shim disconnected" id=e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620 namespace=moby Oct 27 13:24:58.305436 containerd[1962]: time="2026-10-27T13:24:58.305287000Z" level=info msg="cleaning up after shim disconnected" id=e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620 namespace=moby Oct 27 13:24:58.305436 containerd[1962]: time="2026-10-27T13:24:58.305292232Z" level=info msg="cleaning up dead shim" id=e9baf465e6f569f3d5cf768b0ac99782d738f38cf04f0e6d6fad352af9ebd620 namespace=moby Oct 27 13:24:58.324630 systemd-networkd[1681]: vethaa34b05: Lost carrier Oct 27 13:24:58.325263 kernel: docker0: port 1(vethaa34b05) entered disabled state Oct 27 13:24:58.325336 kernel: veth927a4fa: renamed from eth0 Oct 27 13:24:58.339000 audit[7027]: NETFILTER_CFG table=raw:136 family=2 entries=1 op=nft_unregister_rule pid=7027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:58.339000 audit[7027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff6feeed0 a2=0 a3=0 items=0 ppid=2508 pid=7027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.339000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:58.343557 systemd-networkd[1681]: vethaa34b05: Link DOWN Oct 27 13:24:58.350780 kernel: docker0: port 1(vethaa34b05) entered disabled state Oct 27 13:24:58.350839 kernel: vethaa34b05 (unregistering): left allmulticast mode Oct 27 13:24:58.354611 kernel: vethaa34b05 (unregistering): left promiscuous mode Oct 27 13:24:58.342000 audit: ANOM_PROMISCUOUS dev=vethaa34b05 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:58.358226 kernel: docker0: port 1(vethaa34b05) entered disabled state Oct 27 13:24:58.342000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0360 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.342000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:58.369259 systemd[1]: run-docker-netns-6cd90b9a58f0.mount: Deactivated successfully. Oct 27 13:24:58.373750 systemd[1]: var-lib-docker-overlay2-8525c3e27da93c16ad26606e798d5ffc8a31d906e6a29860eff6b3c7f25a646a-merged.mount: Deactivated successfully. Oct 27 13:24:58.385000 audit: BPF prog-id=283 op=UNLOAD Oct 27 13:24:58.385000 audit: BPF prog-id=287 op=UNLOAD Oct 27 13:24:58.499749 systemd[1]: var-lib-docker-overlay2-80a8be29cbb3cb74b1a18ce7371ec2093b10d1285e2d6f3e48b520a1d728e300-merged.mount: Deactivated successfully. Oct 27 13:24:58.541597 containerd[1962]: time="2026-10-27T13:24:58.541525516Z" level=info msg="connecting to shim 7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3" address="unix:///run/containerd/s/93d02f7e1c90d7ced57a17f9d010a55c5e62d4941de21d113d6bfa74c37923f1" namespace=moby protocol=ttrpc version=3 Oct 27 13:24:58.562253 systemd[1]: Started docker-7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3.scope - libcontainer container 7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3. Oct 27 13:24:58.570000 audit: BPF prog-id=288 op=LOAD Oct 27 13:24:58.570000 audit: BPF prog-id=289 op=LOAD Oct 27 13:24:58.570000 audit[7056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f81df371f90 a2=98 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.570000 audit: BPF prog-id=289 op=UNLOAD Oct 27 13:24:58.570000 audit[7056]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.571000 audit: BPF prog-id=290 op=LOAD Oct 27 13:24:58.571000 audit[7056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f81df372268 a2=98 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.571000 audit: BPF prog-id=291 op=LOAD Oct 27 13:24:58.571000 audit[7056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1f81df371fa8 a2=98 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.571000 audit: BPF prog-id=291 op=UNLOAD Oct 27 13:24:58.571000 audit[7056]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.571000 audit: BPF prog-id=290 op=UNLOAD Oct 27 13:24:58.571000 audit[7056]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.571000 audit: BPF prog-id=292 op=LOAD Oct 27 13:24:58.571000 audit[7056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f81df3724b8 a2=98 a3=0 items=0 ppid=7045 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626462623362303033376563333030663232383533363563 Oct 27 13:24:58.585390 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:24:58.592699 kernel: docker0: port 1(vethf03085f) entered blocking state Oct 27 13:24:58.592777 kernel: docker0: port 1(vethf03085f) entered disabled state Oct 27 13:24:58.595586 kernel: vethf03085f: entered allmulticast mode Oct 27 13:24:58.598461 kernel: vethf03085f: entered promiscuous mode Oct 27 13:24:58.584000 audit: ANOM_PROMISCUOUS dev=vethf03085f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:58.584000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472ff0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.584000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:58.599000 audit[7078]: NETFILTER_CFG table=raw:137 family=2 entries=1 op=nft_register_rule pid=7078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:58.599000 audit[7078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff1486f80 a2=0 a3=0 items=0 ppid=2508 pid=7078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:58.599000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:58.602194 systemd-networkd[1681]: vethf03085f: Link UP Oct 27 13:24:58.619111 kernel: eth0: renamed from veth8f65825 Oct 27 13:24:58.619183 kernel: docker0: port 1(vethf03085f) entered blocking state Oct 27 13:24:58.619210 kernel: docker0: port 1(vethf03085f) entered forwarding state Oct 27 13:24:58.622623 systemd-networkd[1681]: vethf03085f: Gained carrier Oct 27 13:24:58.623469 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:24:59.213883 sshd[7000]: Invalid user trader from 109.160.32.131 port 54602 Oct 27 13:24:59.646616 systemd[1]: docker-7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3.scope: Deactivated successfully. Oct 27 13:24:59.658967 containerd[1962]: time="2026-10-27T13:24:59.658807104Z" level=info msg="shim disconnected" id=7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3 namespace=moby Oct 27 13:24:59.658967 containerd[1962]: time="2026-10-27T13:24:59.658851397Z" level=info msg="cleaning up after shim disconnected" id=7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3 namespace=moby Oct 27 13:24:59.658967 containerd[1962]: time="2026-10-27T13:24:59.658859452Z" level=info msg="cleaning up dead shim" id=7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3 namespace=moby Oct 27 13:24:59.659328 dockerd[2508]: time="2026-10-27T13:24:59.658884587Z" level=info msg="ignoring event" container=7bdbb3b0037ec300f2285365c70fe44cc678f2300cce17c3bd29d85170f44ef3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:24:59.681707 kernel: docker0: port 1(vethf03085f) entered disabled state Oct 27 13:24:59.681466 systemd-networkd[1681]: vethf03085f: Lost carrier Oct 27 13:24:59.681986 kernel: veth8f65825: renamed from eth0 Oct 27 13:24:59.690748 sshd[7000]: Connection closed by invalid user trader 109.160.32.131 port 54602 [preauth] Oct 27 13:24:59.692000 audit[7000]: AUDIT1109 pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:59.703269 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:24:59.703314 kernel: audit: type=1109 audit(1793107499.692:1110): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:24:59.712348 systemd[1]: sshd@43-4124-10.0.0.24:22-109.160.32.131:54602.service: Deactivated successfully. Oct 27 13:24:59.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-4124-10.0.0.24:22-109.160.32.131:54602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:59.728126 kernel: audit: type=1131 audit(1793107499.712:1111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-4124-10.0.0.24:22-109.160.32.131:54602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:24:59.729000 audit[7110]: NETFILTER_CFG table=raw:138 family=2 entries=1 op=nft_unregister_rule pid=7110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:59.729000 audit[7110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd6856af0 a2=0 a3=0 items=0 ppid=2508 pid=7110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:59.756092 kernel: audit: type=1325 audit(1793107499.729:1112): table=raw:138 family=2 entries=1 op=nft_unregister_rule pid=7110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:24:59.756151 kernel: audit: type=1300 audit(1793107499.729:1112): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd6856af0 a2=0 a3=0 items=0 ppid=2508 pid=7110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:59.729000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:59.767161 kernel: audit: type=1327 audit(1793107499.729:1112): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:24:59.768562 systemd-networkd[1681]: vethf03085f: Link DOWN Oct 27 13:24:59.770985 kernel: docker0: port 1(vethf03085f) entered disabled state Oct 27 13:24:59.774427 kernel: vethf03085f (unregistering): left allmulticast mode Oct 27 13:24:59.778243 kernel: vethf03085f (unregistering): left promiscuous mode Oct 27 13:24:59.766000 audit: ANOM_PROMISCUOUS dev=vethf03085f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:59.788954 kernel: audit: type=1700 audit(1793107499.766:1113): dev=vethf03085f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:24:59.789028 kernel: docker0: port 1(vethf03085f) entered disabled state Oct 27 13:24:59.766000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774940 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:59.766000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:59.833605 kernel: audit: type=1300 audit(1793107499.766:1113): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774940 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:24:59.833652 kernel: audit: type=1327 audit(1793107499.766:1113): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:24:59.835397 systemd[1]: run-docker-netns-ff6acca1d25d.mount: Deactivated successfully. Oct 27 13:24:59.838162 systemd[1]: var-lib-docker-overlay2-80a8be29cbb3cb74b1a18ce7371ec2093b10d1285e2d6f3e48b520a1d728e300-merged.mount: Deactivated successfully. Oct 27 13:24:59.845000 audit: BPF prog-id=288 op=UNLOAD Oct 27 13:24:59.845000 audit: BPF prog-id=292 op=UNLOAD Oct 27 13:24:59.875623 kernel: audit: type=1334 audit(1793107499.845:1114): prog-id=288 op=UNLOAD Oct 27 13:24:59.875672 kernel: audit: type=1334 audit(1793107499.845:1115): prog-id=292 op=UNLOAD Oct 27 13:24:59.986564 containerd[1962]: time="2026-10-27T13:24:59.986459478Z" level=info msg="connecting to shim 5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc" address="unix:///run/containerd/s/d5240801bd2779cfe712c790482330d9653790f3f1018b694c091404a4f24821" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:00.004255 systemd[1]: Started docker-5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc.scope - libcontainer container 5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc. Oct 27 13:25:00.011000 audit: BPF prog-id=293 op=LOAD Oct 27 13:25:00.012000 audit: BPF prog-id=294 op=LOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=395253ad3f90 a2=98 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=294 op=UNLOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=295 op=LOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=395253ad4268 a2=98 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=296 op=LOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=395253ad3fa8 a2=98 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=296 op=UNLOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=295 op=UNLOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.012000 audit: BPF prog-id=297 op=LOAD Oct 27 13:25:00.012000 audit[7137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=395253ad44b8 a2=98 a3=0 items=0 ppid=7125 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303839643834363238323065343562663836646366366535 Oct 27 13:25:00.035370 kernel: docker0: port 1(vethea6789a) entered blocking state Oct 27 13:25:00.035467 kernel: docker0: port 1(vethea6789a) entered disabled state Oct 27 13:25:00.038164 kernel: vethea6789a: entered allmulticast mode Oct 27 13:25:00.040940 kernel: vethea6789a: entered promiscuous mode Oct 27 13:25:00.025000 audit: ANOM_PROMISCUOUS dev=vethea6789a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:00.025000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333800 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.025000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:00.042057 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:00.043000 audit[7161]: NETFILTER_CFG table=raw:139 family=2 entries=1 op=nft_register_rule pid=7161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:00.043000 audit[7161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff7a729e0 a2=0 a3=0 items=0 ppid=2508 pid=7161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:00.043000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:00.044962 systemd-networkd[1681]: vethea6789a: Link UP Oct 27 13:25:00.064307 kernel: eth0: renamed from veth5fa6dbf Oct 27 13:25:00.064389 kernel: docker0: port 1(vethea6789a) entered blocking state Oct 27 13:25:00.067918 kernel: docker0: port 1(vethea6789a) entered forwarding state Oct 27 13:25:00.068263 systemd-networkd[1681]: vethea6789a: Gained carrier Oct 27 13:25:00.068487 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:01.095696 systemd[1]: docker-5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc.scope: Deactivated successfully. Oct 27 13:25:01.109682 dockerd[2508]: time="2026-10-27T13:25:01.109591276Z" level=info msg="ignoring event" container=5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:01.110262 containerd[1962]: time="2026-10-27T13:25:01.110133667Z" level=info msg="shim disconnected" id=5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc namespace=moby Oct 27 13:25:01.110262 containerd[1962]: time="2026-10-27T13:25:01.110162130Z" level=info msg="cleaning up after shim disconnected" id=5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc namespace=moby Oct 27 13:25:01.110262 containerd[1962]: time="2026-10-27T13:25:01.110167441Z" level=info msg="cleaning up dead shim" id=5089d8462820e45bf86dcf6e5e9315a0ca89c7d07fcc9cf9e27f8d959eca67cc namespace=moby Oct 27 13:25:01.130562 systemd-networkd[1681]: vethea6789a: Lost carrier Oct 27 13:25:01.131112 kernel: docker0: port 1(vethea6789a) entered disabled state Oct 27 13:25:01.134117 kernel: veth5fa6dbf: renamed from eth0 Oct 27 13:25:01.147000 audit[7193]: NETFILTER_CFG table=raw:140 family=2 entries=1 op=nft_unregister_rule pid=7193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:01.147000 audit[7193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcc95ab80 a2=0 a3=0 items=0 ppid=2508 pid=7193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:01.153536 systemd-networkd[1681]: vethea6789a: Link DOWN Oct 27 13:25:01.160876 kernel: docker0: port 1(vethea6789a) entered disabled state Oct 27 13:25:01.160944 kernel: vethea6789a (unregistering): left allmulticast mode Oct 27 13:25:01.164568 kernel: vethea6789a (unregistering): left promiscuous mode Oct 27 13:25:01.152000 audit: ANOM_PROMISCUOUS dev=vethea6789a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:01.168086 kernel: docker0: port 1(vethea6789a) entered disabled state Oct 27 13:25:01.152000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1052480 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.152000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:01.174780 systemd[1]: run-docker-netns-b421de126b1b.mount: Deactivated successfully. Oct 27 13:25:01.178829 systemd[1]: var-lib-docker-overlay2-4a97f9677daefec62d411e30663381e49259700f5d34d1a065e76825becf13aa-merged.mount: Deactivated successfully. Oct 27 13:25:01.193000 audit: BPF prog-id=293 op=UNLOAD Oct 27 13:25:01.193000 audit: BPF prog-id=297 op=UNLOAD Oct 27 13:25:01.283016 systemd[1]: var-lib-docker-overlay2-9bfb86aa35d2bbbfd8b92a866c4340b8d789e6bd5982e1aa715d42ba2d46937b\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:01.343216 containerd[1962]: time="2026-10-27T13:25:01.343134029Z" level=info msg="connecting to shim b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74" address="unix:///run/containerd/s/0400074bac01406748d493d936c29bddabfdce914daaf5f8e4936e5ffb373d1d" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:01.366256 systemd[1]: Started docker-b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74.scope - libcontainer container b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74. Oct 27 13:25:01.376000 audit: BPF prog-id=298 op=LOAD Oct 27 13:25:01.377000 audit: BPF prog-id=299 op=LOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e2848745f90 a2=98 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=299 op=UNLOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=300 op=LOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e2848746268 a2=98 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=301 op=LOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6e2848745fa8 a2=98 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=301 op=UNLOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=300 op=UNLOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.377000 audit: BPF prog-id=302 op=LOAD Oct 27 13:25:01.377000 audit[7222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e28487464b8 a2=98 a3=0 items=0 ppid=7212 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353331393662303939313737656133313732393736333162 Oct 27 13:25:01.400475 kernel: docker0: port 1(veth52cd04a) entered blocking state Oct 27 13:25:01.400573 kernel: docker0: port 1(veth52cd04a) entered disabled state Oct 27 13:25:01.403481 kernel: veth52cd04a: entered allmulticast mode Oct 27 13:25:01.406368 kernel: veth52cd04a: entered promiscuous mode Oct 27 13:25:01.392000 audit: ANOM_PROMISCUOUS dev=veth52cd04a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:01.392000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7770 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.392000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:01.406948 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:01.408000 audit[7244]: NETFILTER_CFG table=raw:141 family=2 entries=1 op=nft_register_rule pid=7244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:01.408000 audit[7244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffccfeb520 a2=0 a3=0 items=0 ppid=2508 pid=7244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:01.408000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:01.410387 systemd-networkd[1681]: veth52cd04a: Link UP Oct 27 13:25:01.431064 kernel: eth0: renamed from vethf196b91 Oct 27 13:25:01.430879 systemd-networkd[1681]: veth52cd04a: Gained carrier Oct 27 13:25:01.431216 kernel: docker0: port 1(veth52cd04a) entered blocking state Oct 27 13:25:01.431235 kernel: docker0: port 1(veth52cd04a) entered forwarding state Oct 27 13:25:01.431383 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:02.457023 systemd[1]: docker-b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74.scope: Deactivated successfully. Oct 27 13:25:02.470778 containerd[1962]: time="2026-10-27T13:25:02.470703421Z" level=info msg="shim disconnected" id=b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74 namespace=moby Oct 27 13:25:02.470778 containerd[1962]: time="2026-10-27T13:25:02.470730987Z" level=info msg="cleaning up after shim disconnected" id=b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74 namespace=moby Oct 27 13:25:02.470778 containerd[1962]: time="2026-10-27T13:25:02.470737539Z" level=info msg="cleaning up dead shim" id=b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74 namespace=moby Oct 27 13:25:02.471328 dockerd[2508]: time="2026-10-27T13:25:02.471200927Z" level=info msg="ignoring event" container=b53196b099177ea317297631b00c92676912052d4af4546b15921377cbd5bb74 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:02.491125 kernel: docker0: port 1(veth52cd04a) entered disabled state Oct 27 13:25:02.491357 systemd-networkd[1681]: veth52cd04a: Lost carrier Oct 27 13:25:02.495117 kernel: vethf196b91: renamed from eth0 Oct 27 13:25:02.513000 audit[7275]: NETFILTER_CFG table=raw:142 family=2 entries=1 op=nft_unregister_rule pid=7275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:02.513000 audit[7275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc68dd6e0 a2=0 a3=0 items=0 ppid=2508 pid=7275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:02.520565 systemd-networkd[1681]: veth52cd04a: Link DOWN Oct 27 13:25:02.529281 kernel: docker0: port 1(veth52cd04a) entered disabled state Oct 27 13:25:02.529731 kernel: veth52cd04a (unregistering): left allmulticast mode Oct 27 13:25:02.529775 kernel: veth52cd04a (unregistering): left promiscuous mode Oct 27 13:25:02.519000 audit: ANOM_PROMISCUOUS dev=veth52cd04a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:02.536112 kernel: docker0: port 1(veth52cd04a) entered disabled state Oct 27 13:25:02.519000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce120 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.519000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:02.543138 systemd[1]: run-docker-netns-5cd8b3fa4d25.mount: Deactivated successfully. Oct 27 13:25:02.547765 systemd[1]: var-lib-docker-overlay2-9bfb86aa35d2bbbfd8b92a866c4340b8d789e6bd5982e1aa715d42ba2d46937b-merged.mount: Deactivated successfully. Oct 27 13:25:02.555000 audit: BPF prog-id=298 op=UNLOAD Oct 27 13:25:02.555000 audit: BPF prog-id=302 op=UNLOAD Oct 27 13:25:02.680592 containerd[1962]: time="2026-10-27T13:25:02.680521708Z" level=info msg="connecting to shim 44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb" address="unix:///run/containerd/s/6e50e003d9f82963e0b98c12cc6d34237073fbf4e6e5a7bf78d13752b483f2c6" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:02.701266 systemd[1]: Started docker-44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb.scope - libcontainer container 44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb. Oct 27 13:25:02.709000 audit: BPF prog-id=303 op=LOAD Oct 27 13:25:02.709000 audit: BPF prog-id=304 op=LOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7f719ede7f90 a2=98 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=304 op=UNLOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=305 op=LOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7f719ede8268 a2=98 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=306 op=LOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=7f719ede7fa8 a2=98 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=306 op=UNLOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=305 op=UNLOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.709000 audit: BPF prog-id=307 op=LOAD Oct 27 13:25:02.709000 audit[7303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7f719ede84b8 a2=98 a3=0 items=0 ppid=7291 pid=7303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346336303130386135646662616165346636386134656666 Oct 27 13:25:02.723552 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:02.730775 kernel: docker0: port 1(vethf56447c) entered blocking state Oct 27 13:25:02.730857 kernel: docker0: port 1(vethf56447c) entered disabled state Oct 27 13:25:02.733908 kernel: vethf56447c: entered allmulticast mode Oct 27 13:25:02.736953 kernel: vethf56447c: entered promiscuous mode Oct 27 13:25:02.722000 audit: ANOM_PROMISCUOUS dev=vethf56447c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:02.722000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64120 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.722000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:02.738000 audit[7325]: NETFILTER_CFG table=raw:143 family=2 entries=1 op=nft_register_rule pid=7325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:02.738000 audit[7325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd53e90e0 a2=0 a3=0 items=0 ppid=2508 pid=7325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:02.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:02.740227 systemd-networkd[1681]: vethf56447c: Link UP Oct 27 13:25:02.757498 kernel: eth0: renamed from veth76de244 Oct 27 13:25:02.757570 kernel: docker0: port 1(vethf56447c) entered blocking state Oct 27 13:25:02.761187 kernel: docker0: port 1(vethf56447c) entered forwarding state Oct 27 13:25:02.761450 systemd-networkd[1681]: vethf56447c: Gained carrier Oct 27 13:25:02.762039 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:02.905987 systemd[1]: Started sshd@44-4125-10.0.0.24:22-109.160.32.131:56186.service - OpenSSH per-connection server daemon (109.160.32.131:56186). Oct 27 13:25:02.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4125-10.0.0.24:22-109.160.32.131:56186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:03.788598 systemd[1]: docker-44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb.scope: Deactivated successfully. Oct 27 13:25:03.801901 dockerd[2508]: time="2026-10-27T13:25:03.801844370Z" level=info msg="ignoring event" container=44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:03.802347 containerd[1962]: time="2026-10-27T13:25:03.801953844Z" level=info msg="shim disconnected" id=44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb namespace=moby Oct 27 13:25:03.802347 containerd[1962]: time="2026-10-27T13:25:03.801981706Z" level=info msg="cleaning up after shim disconnected" id=44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb namespace=moby Oct 27 13:25:03.802347 containerd[1962]: time="2026-10-27T13:25:03.801987226Z" level=info msg="cleaning up dead shim" id=44c60108a5dfbaae4f68a4efff88b013910fb84420fb60cd26f527cae1e25afb namespace=moby Oct 27 13:25:03.822827 systemd-networkd[1681]: vethf56447c: Lost carrier Oct 27 13:25:03.823235 kernel: docker0: port 1(vethf56447c) entered disabled state Oct 27 13:25:03.827217 kernel: veth76de244: renamed from eth0 Oct 27 13:25:03.839000 audit[7359]: NETFILTER_CFG table=raw:144 family=2 entries=1 op=nft_unregister_rule pid=7359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:03.839000 audit[7359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc9eb7a60 a2=0 a3=0 items=0 ppid=2508 pid=7359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:03.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:03.850647 systemd-networkd[1681]: vethf56447c: Link DOWN Oct 27 13:25:03.858840 kernel: docker0: port 1(vethf56447c) entered disabled state Oct 27 13:25:03.858910 kernel: vethf56447c (unregistering): left allmulticast mode Oct 27 13:25:03.862823 kernel: vethf56447c (unregistering): left promiscuous mode Oct 27 13:25:03.849000 audit: ANOM_PROMISCUOUS dev=vethf56447c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:03.866827 kernel: docker0: port 1(vethf56447c) entered disabled state Oct 27 13:25:03.849000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1620 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:03.849000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:03.877000 systemd[1]: run-docker-netns-1311c222e7ff.mount: Deactivated successfully. Oct 27 13:25:03.879876 systemd[1]: var-lib-docker-overlay2-10037e3c9ee3b783812fdb154db1f5077a1959f2da571ef3defc251925bf17a1-merged.mount: Deactivated successfully. Oct 27 13:25:03.895000 audit: BPF prog-id=303 op=UNLOAD Oct 27 13:25:03.895000 audit: BPF prog-id=307 op=UNLOAD Oct 27 13:25:03.974518 systemd[1]: var-lib-docker-overlay2-53c251aba932e465e700ab20b8c5f65ce4fe96e24cda65451c6d68e35f9a090d\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:04.049529 containerd[1962]: time="2026-10-27T13:25:04.049424331Z" level=info msg="connecting to shim b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98" address="unix:///run/containerd/s/469e30a0ce7e800f5e5c6fdb9c60b083c92f7d466a9235050895d94a9f848a0f" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:04.067240 systemd[1]: Started docker-b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98.scope - libcontainer container b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98. Oct 27 13:25:04.074000 audit: BPF prog-id=308 op=LOAD Oct 27 13:25:04.074000 audit: BPF prog-id=309 op=LOAD Oct 27 13:25:04.074000 audit[7389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=60ea5efb1f90 a2=98 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=309 op=UNLOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=310 op=LOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=60ea5efb2268 a2=98 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=311 op=LOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=60ea5efb1fa8 a2=98 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=311 op=UNLOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=310 op=UNLOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.075000 audit: BPF prog-id=312 op=LOAD Oct 27 13:25:04.075000 audit[7389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=60ea5efb24b8 a2=98 a3=0 items=0 ppid=7377 pid=7389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363632643831373864373137396431383939336331343930 Oct 27 13:25:04.089176 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:04.096500 kernel: docker0: port 1(veth0c9648e) entered blocking state Oct 27 13:25:04.096597 kernel: docker0: port 1(veth0c9648e) entered disabled state Oct 27 13:25:04.099969 kernel: veth0c9648e: entered allmulticast mode Oct 27 13:25:04.103261 kernel: veth0c9648e: entered promiscuous mode Oct 27 13:25:04.087000 audit: ANOM_PROMISCUOUS dev=veth0c9648e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:04.087000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c656b0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.087000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:04.104000 audit[7411]: NETFILTER_CFG table=raw:145 family=2 entries=1 op=nft_register_rule pid=7411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:04.104000 audit[7411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe7d8fae0 a2=0 a3=0 items=0 ppid=2508 pid=7411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:04.104000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:04.106791 systemd-networkd[1681]: veth0c9648e: Link UP Oct 27 13:25:04.124469 kernel: eth0: renamed from veth0c73bd9 Oct 27 13:25:04.124560 kernel: docker0: port 1(veth0c9648e) entered blocking state Oct 27 13:25:04.128530 kernel: docker0: port 1(veth0c9648e) entered forwarding state Oct 27 13:25:04.128914 systemd-networkd[1681]: veth0c9648e: Gained carrier Oct 27 13:25:04.129879 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:04.920091 sshd[7335]: Invalid user debian from 109.160.32.131 port 56186 Oct 27 13:25:05.152260 systemd[1]: docker-b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98.scope: Deactivated successfully. Oct 27 13:25:05.164627 containerd[1962]: time="2026-10-27T13:25:05.164577235Z" level=info msg="shim disconnected" id=b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98 namespace=moby Oct 27 13:25:05.164627 containerd[1962]: time="2026-10-27T13:25:05.164608073Z" level=info msg="cleaning up after shim disconnected" id=b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98 namespace=moby Oct 27 13:25:05.164627 containerd[1962]: time="2026-10-27T13:25:05.164613729Z" level=info msg="cleaning up dead shim" id=b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98 namespace=moby Oct 27 13:25:05.165430 dockerd[2508]: time="2026-10-27T13:25:05.164531477Z" level=info msg="ignoring event" container=b662d8178d7179d18993c1490040a27d0fa0cc734ac9ea6fd79d73e0ed8e3c98 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:05.186185 kernel: docker0: port 1(veth0c9648e) entered disabled state Oct 27 13:25:05.186381 systemd-networkd[1681]: veth0c9648e: Lost carrier Oct 27 13:25:05.191112 kernel: veth0c73bd9: renamed from eth0 Oct 27 13:25:05.207000 audit[7441]: NETFILTER_CFG table=raw:146 family=2 entries=1 op=nft_unregister_rule pid=7441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:05.211677 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:05.211743 kernel: audit: type=1325 audit(1793107505.207:1169): table=raw:146 family=2 entries=1 op=nft_unregister_rule pid=7441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:05.207000 audit[7441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe82f8e60 a2=0 a3=0 items=0 ppid=2508 pid=7441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.240654 kernel: audit: type=1300 audit(1793107505.207:1169): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe82f8e60 a2=0 a3=0 items=0 ppid=2508 pid=7441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.207000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:05.241183 kernel: audit: type=1327 audit(1793107505.207:1169): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:05.254319 systemd-networkd[1681]: veth0c9648e: Link DOWN Oct 27 13:25:05.256103 kernel: docker0: port 1(veth0c9648e) entered disabled state Oct 27 13:25:05.266851 kernel: veth0c9648e (unregistering): left allmulticast mode Oct 27 13:25:05.266915 kernel: veth0c9648e (unregistering): left promiscuous mode Oct 27 13:25:05.252000 audit: ANOM_PROMISCUOUS dev=veth0c9648e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:05.271234 kernel: docker0: port 1(veth0c9648e) entered disabled state Oct 27 13:25:05.271262 kernel: audit: type=1700 audit(1793107505.252:1170): dev=veth0c9648e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:05.252000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ac00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.252000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:05.312132 systemd[1]: run-docker-netns-f7b04155a7f3.mount: Deactivated successfully. Oct 27 13:25:05.313766 systemd[1]: var-lib-docker-overlay2-53c251aba932e465e700ab20b8c5f65ce4fe96e24cda65451c6d68e35f9a090d-merged.mount: Deactivated successfully. Oct 27 13:25:05.326564 kernel: audit: type=1300 audit(1793107505.252:1170): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ac00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.326657 kernel: audit: type=1327 audit(1793107505.252:1170): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:05.336000 audit: BPF prog-id=308 op=UNLOAD Oct 27 13:25:05.336000 audit: BPF prog-id=312 op=UNLOAD Oct 27 13:25:05.380955 kernel: audit: type=1334 audit(1793107505.336:1171): prog-id=308 op=UNLOAD Oct 27 13:25:05.381014 kernel: audit: type=1334 audit(1793107505.336:1172): prog-id=312 op=UNLOAD Oct 27 13:25:05.416144 sshd[7335]: Connection closed by invalid user debian 109.160.32.131 port 56186 [preauth] Oct 27 13:25:05.415000 audit[7335]: AUDIT1109 pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:05.423404 systemd[1]: sshd@44-4125-10.0.0.24:22-109.160.32.131:56186.service: Deactivated successfully. Oct 27 13:25:05.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4125-10.0.0.24:22-109.160.32.131:56186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:05.449350 kernel: audit: type=1109 audit(1793107505.415:1173): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:05.449464 kernel: audit: type=1131 audit(1793107505.423:1174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4125-10.0.0.24:22-109.160.32.131:56186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:05.520260 containerd[1962]: time="2026-10-27T13:25:05.520222333Z" level=info msg="connecting to shim a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7" address="unix:///run/containerd/s/596e95136a67eceb656511cb94e4b5ae3bf1e45bd157238deece1e60ddb1363c" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:05.537512 systemd[1]: Started docker-a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7.scope - libcontainer container a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7. Oct 27 13:25:05.546000 audit: BPF prog-id=313 op=LOAD Oct 27 13:25:05.546000 audit: BPF prog-id=314 op=LOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74b532f31f90 a2=98 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=314 op=UNLOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=315 op=LOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74b532f32268 a2=98 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=316 op=LOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=74b532f31fa8 a2=98 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=316 op=UNLOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=315 op=UNLOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.546000 audit: BPF prog-id=317 op=LOAD Oct 27 13:25:05.546000 audit[7472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74b532f324b8 a2=98 a3=0 items=0 ppid=7461 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61323837306532626139376330316435653531366334306538 Oct 27 13:25:05.562952 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:05.571334 kernel: docker0: port 1(veth1480f9e) entered blocking state Oct 27 13:25:05.571412 kernel: docker0: port 1(veth1480f9e) entered disabled state Oct 27 13:25:05.576248 kernel: veth1480f9e: entered allmulticast mode Oct 27 13:25:05.579973 kernel: veth1480f9e: entered promiscuous mode Oct 27 13:25:05.561000 audit: ANOM_PROMISCUOUS dev=veth1480f9e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:05.561000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f950 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.561000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:05.582000 audit[7492]: NETFILTER_CFG table=raw:147 family=2 entries=1 op=nft_register_rule pid=7492 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:05.582000 audit[7492]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8b72250 a2=0 a3=0 items=0 ppid=2508 pid=7492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:05.582000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:05.583905 systemd-networkd[1681]: veth1480f9e: Link UP Oct 27 13:25:05.597120 kernel: eth0: renamed from vethfd3f2d0 Oct 27 13:25:05.605745 kernel: docker0: port 1(veth1480f9e) entered blocking state Oct 27 13:25:05.605942 kernel: docker0: port 1(veth1480f9e) entered forwarding state Oct 27 13:25:05.605803 systemd-networkd[1681]: veth1480f9e: Gained carrier Oct 27 13:25:05.606524 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:06.632054 systemd[1]: docker-a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7.scope: Deactivated successfully. Oct 27 13:25:06.643852 containerd[1962]: time="2026-10-27T13:25:06.643816082Z" level=info msg="shim disconnected" id=a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7 namespace=moby Oct 27 13:25:06.643852 containerd[1962]: time="2026-10-27T13:25:06.643847713Z" level=info msg="cleaning up after shim disconnected" id=a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7 namespace=moby Oct 27 13:25:06.643852 containerd[1962]: time="2026-10-27T13:25:06.643853872Z" level=info msg="cleaning up dead shim" id=a2870e2ba97c01d5e516c40e829b7a683fe2c4d0baf206ffd905bdadd1c7f2f7 namespace=moby Oct 27 13:25:06.666516 systemd-networkd[1681]: veth1480f9e: Lost carrier Oct 27 13:25:06.667204 kernel: docker0: port 1(veth1480f9e) entered disabled state Oct 27 13:25:06.667273 kernel: vethfd3f2d0: renamed from eth0 Oct 27 13:25:06.683000 audit[7524]: NETFILTER_CFG table=raw:148 family=2 entries=1 op=nft_unregister_rule pid=7524 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:06.683000 audit[7524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcd9984a0 a2=0 a3=0 items=0 ppid=2508 pid=7524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:06.693600 systemd-networkd[1681]: veth1480f9e: Link DOWN Oct 27 13:25:06.700673 kernel: docker0: port 1(veth1480f9e) entered disabled state Oct 27 13:25:06.700735 kernel: veth1480f9e (unregistering): left allmulticast mode Oct 27 13:25:06.704261 kernel: veth1480f9e (unregistering): left promiscuous mode Oct 27 13:25:06.692000 audit: ANOM_PROMISCUOUS dev=veth1480f9e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:06.708426 kernel: docker0: port 1(veth1480f9e) entered disabled state Oct 27 13:25:06.692000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a20c0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.692000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:06.715070 systemd[1]: run-docker-netns-02a5d778e8ca.mount: Deactivated successfully. Oct 27 13:25:06.718559 systemd[1]: var-lib-docker-overlay2-003474c33a4a6d247c06aa403c356b6bcb73faa8a933c1e88d17c6a68af1f823-merged.mount: Deactivated successfully. Oct 27 13:25:06.727000 audit: BPF prog-id=313 op=UNLOAD Oct 27 13:25:06.727000 audit: BPF prog-id=317 op=UNLOAD Oct 27 13:25:06.844455 containerd[1962]: time="2026-10-27T13:25:06.844387068Z" level=info msg="connecting to shim 0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059" address="unix:///run/containerd/s/02819321ae0accb278965b61df5d70d8be6fc89a0bc4971f04ac0c09955d1639" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:06.866510 systemd[1]: Started docker-0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059.scope - libcontainer container 0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059. Oct 27 13:25:06.874000 audit: BPF prog-id=318 op=LOAD Oct 27 13:25:06.874000 audit: BPF prog-id=319 op=LOAD Oct 27 13:25:06.874000 audit[7553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2c9ed0645f90 a2=98 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.874000 audit: BPF prog-id=319 op=UNLOAD Oct 27 13:25:06.874000 audit[7553]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.875000 audit: BPF prog-id=320 op=LOAD Oct 27 13:25:06.875000 audit[7553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2c9ed0646268 a2=98 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.875000 audit: BPF prog-id=321 op=LOAD Oct 27 13:25:06.875000 audit[7553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2c9ed0645fa8 a2=98 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.875000 audit: BPF prog-id=321 op=UNLOAD Oct 27 13:25:06.875000 audit[7553]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.875000 audit: BPF prog-id=320 op=UNLOAD Oct 27 13:25:06.875000 audit[7553]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.875000 audit: BPF prog-id=322 op=LOAD Oct 27 13:25:06.875000 audit[7553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2c9ed06464b8 a2=98 a3=0 items=0 ppid=7542 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343832663038666264356537323862623636363862623139 Oct 27 13:25:06.893137 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:06.896449 kernel: docker0: port 1(vetha2e7fe8) entered blocking state Oct 27 13:25:06.896512 kernel: docker0: port 1(vetha2e7fe8) entered disabled state Oct 27 13:25:06.899514 kernel: vetha2e7fe8: entered allmulticast mode Oct 27 13:25:06.902430 kernel: vetha2e7fe8: entered promiscuous mode Oct 27 13:25:06.888000 audit: ANOM_PROMISCUOUS dev=vetha2e7fe8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:06.888000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332840 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.888000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:06.904000 audit[7575]: NETFILTER_CFG table=raw:149 family=2 entries=1 op=nft_register_rule pid=7575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:06.904000 audit[7575]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc517c000 a2=0 a3=0 items=0 ppid=2508 pid=7575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:06.904000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:06.905880 systemd-networkd[1681]: vetha2e7fe8: Link UP Oct 27 13:25:06.923330 kernel: eth0: renamed from veth2b05082 Oct 27 13:25:06.923406 kernel: docker0: port 1(vetha2e7fe8) entered blocking state Oct 27 13:25:06.923425 kernel: docker0: port 1(vetha2e7fe8) entered forwarding state Oct 27 13:25:06.927083 systemd-networkd[1681]: vetha2e7fe8: Gained carrier Oct 27 13:25:06.927508 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:07.954408 systemd[1]: docker-0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059.scope: Deactivated successfully. Oct 27 13:25:07.968031 dockerd[2508]: time="2026-10-27T13:25:07.967957690Z" level=info msg="ignoring event" container=0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:07.969040 containerd[1962]: time="2026-10-27T13:25:07.968995901Z" level=info msg="shim disconnected" id=0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059 namespace=moby Oct 27 13:25:07.969402 containerd[1962]: time="2026-10-27T13:25:07.969145028Z" level=info msg="cleaning up after shim disconnected" id=0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059 namespace=moby Oct 27 13:25:07.969402 containerd[1962]: time="2026-10-27T13:25:07.969160923Z" level=info msg="cleaning up dead shim" id=0482f08fbd5e728bb6668bb1921d88d017cd36ead0cb592a2c62f0b44f4d7059 namespace=moby Oct 27 13:25:07.989073 systemd-networkd[1681]: vetha2e7fe8: Lost carrier Oct 27 13:25:07.989614 kernel: docker0: port 1(vetha2e7fe8) entered disabled state Oct 27 13:25:07.993114 kernel: veth2b05082: renamed from eth0 Oct 27 13:25:08.004000 audit[7605]: NETFILTER_CFG table=raw:150 family=2 entries=1 op=nft_unregister_rule pid=7605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:08.004000 audit[7605]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc444d210 a2=0 a3=0 items=0 ppid=2508 pid=7605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.004000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:08.012568 systemd-networkd[1681]: vetha2e7fe8: Link DOWN Oct 27 13:25:08.017117 kernel: docker0: port 1(vetha2e7fe8) entered disabled state Oct 27 13:25:08.025607 kernel: vetha2e7fe8 (unregistering): left allmulticast mode Oct 27 13:25:08.025677 kernel: vetha2e7fe8 (unregistering): left promiscuous mode Oct 27 13:25:08.011000 audit: ANOM_PROMISCUOUS dev=vetha2e7fe8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:08.030175 kernel: docker0: port 1(vetha2e7fe8) entered disabled state Oct 27 13:25:08.011000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.011000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:08.042223 systemd[1]: run-docker-netns-48f59b75e517.mount: Deactivated successfully. Oct 27 13:25:08.045567 systemd[1]: var-lib-docker-overlay2-eee8c9bc264a619b7afa373381fcd8a9e857b66e54a45ccb7eb1d5c1283ba58f-merged.mount: Deactivated successfully. Oct 27 13:25:08.051000 audit: BPF prog-id=318 op=UNLOAD Oct 27 13:25:08.051000 audit: BPF prog-id=322 op=UNLOAD Oct 27 13:25:08.120050 systemd[1]: var-lib-docker-overlay2-2b499d898f940ee029197371e5bbaabd697a9eb53a88996a355e08800df24c76\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:08.186628 containerd[1962]: time="2026-10-27T13:25:08.186565851Z" level=info msg="connecting to shim ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318" address="unix:///run/containerd/s/c820af0e9df276c5dd353e9611d1ec51c7887a766ed813981edd473e39bb944c" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:08.208253 systemd[1]: Started docker-ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318.scope - libcontainer container ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318. Oct 27 13:25:08.215000 audit: BPF prog-id=323 op=LOAD Oct 27 13:25:08.216000 audit: BPF prog-id=324 op=LOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=670e7586ff90 a2=98 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=324 op=UNLOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=325 op=LOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=670e75870268 a2=98 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=326 op=LOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=670e7586ffa8 a2=98 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=326 op=UNLOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=325 op=UNLOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.216000 audit: BPF prog-id=327 op=LOAD Oct 27 13:25:08.216000 audit[7632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=670e758704b8 a2=98 a3=0 items=0 ppid=7621 pid=7632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633938313839323437393730306565643462323666353536 Oct 27 13:25:08.237739 kernel: docker0: port 1(vethd6dd319) entered blocking state Oct 27 13:25:08.237853 kernel: docker0: port 1(vethd6dd319) entered disabled state Oct 27 13:25:08.240701 kernel: vethd6dd319: entered allmulticast mode Oct 27 13:25:08.244157 kernel: vethd6dd319: entered promiscuous mode Oct 27 13:25:08.229000 audit: ANOM_PROMISCUOUS dev=vethd6dd319 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:08.229000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332420 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.229000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:08.245541 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:08.247000 audit[7655]: NETFILTER_CFG table=raw:151 family=2 entries=1 op=nft_register_rule pid=7655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:08.247000 audit[7655]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe31475c0 a2=0 a3=0 items=0 ppid=2508 pid=7655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:08.247000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:08.249547 systemd-networkd[1681]: vethd6dd319: Link UP Oct 27 13:25:08.263121 kernel: eth0: renamed from vethdf17da9 Oct 27 13:25:08.270672 kernel: docker0: port 1(vethd6dd319) entered blocking state Oct 27 13:25:08.270738 kernel: docker0: port 1(vethd6dd319) entered forwarding state Oct 27 13:25:08.270788 systemd-networkd[1681]: vethd6dd319: Gained carrier Oct 27 13:25:08.271660 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:09.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-17-10.0.0.24:22-109.160.32.131:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:09.234954 systemd[1]: Started sshd@45-17-10.0.0.24:22-109.160.32.131:56322.service - OpenSSH per-connection server daemon (109.160.32.131:56322). Oct 27 13:25:09.295596 systemd[1]: docker-ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318.scope: Deactivated successfully. Oct 27 13:25:09.307801 dockerd[2508]: time="2026-10-27T13:25:09.307761342Z" level=info msg="ignoring event" container=ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:09.309118 containerd[1962]: time="2026-10-27T13:25:09.308475403Z" level=info msg="shim disconnected" id=ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318 namespace=moby Oct 27 13:25:09.309118 containerd[1962]: time="2026-10-27T13:25:09.308506506Z" level=info msg="cleaning up after shim disconnected" id=ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318 namespace=moby Oct 27 13:25:09.309118 containerd[1962]: time="2026-10-27T13:25:09.308512809Z" level=info msg="cleaning up dead shim" id=ac981892479700eed4b26f556c14b10fc15719b5aa409a731f8c3ed0159a3318 namespace=moby Oct 27 13:25:09.328849 systemd-networkd[1681]: vethd6dd319: Lost carrier Oct 27 13:25:09.329158 kernel: docker0: port 1(vethd6dd319) entered disabled state Oct 27 13:25:09.332120 kernel: vethdf17da9: renamed from eth0 Oct 27 13:25:09.345000 audit[7689]: NETFILTER_CFG table=raw:152 family=2 entries=1 op=nft_unregister_rule pid=7689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:09.345000 audit[7689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3e73bd0 a2=0 a3=0 items=0 ppid=2508 pid=7689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.345000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:09.353512 systemd-networkd[1681]: vethd6dd319: Link DOWN Oct 27 13:25:09.357111 kernel: docker0: port 1(vethd6dd319) entered disabled state Oct 27 13:25:09.364487 kernel: vethd6dd319 (unregistering): left allmulticast mode Oct 27 13:25:09.364548 kernel: vethd6dd319 (unregistering): left promiscuous mode Oct 27 13:25:09.352000 audit: ANOM_PROMISCUOUS dev=vethd6dd319 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:09.368529 kernel: docker0: port 1(vethd6dd319) entered disabled state Oct 27 13:25:09.352000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774d80 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.352000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:09.380048 systemd[1]: run-docker-netns-694d52e42642.mount: Deactivated successfully. Oct 27 13:25:09.383789 systemd[1]: var-lib-docker-overlay2-2b499d898f940ee029197371e5bbaabd697a9eb53a88996a355e08800df24c76-merged.mount: Deactivated successfully. Oct 27 13:25:09.391000 audit: BPF prog-id=323 op=UNLOAD Oct 27 13:25:09.391000 audit: BPF prog-id=327 op=UNLOAD Oct 27 13:25:09.481680 systemd[1]: var-lib-docker-overlay2-1f65b49cc71507d8f83705db36b44c69e33c66db6014f635c1a4a183a160007a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:09.546289 containerd[1962]: time="2026-10-27T13:25:09.546245616Z" level=info msg="connecting to shim 5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23" address="unix:///run/containerd/s/1a854b16389b9b9340bccf371efbf69329b6930541f57bcc48717ebe55ff4439" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:09.569248 systemd[1]: Started docker-5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23.scope - libcontainer container 5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23. Oct 27 13:25:09.576000 audit: BPF prog-id=328 op=LOAD Oct 27 13:25:09.576000 audit: BPF prog-id=329 op=LOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=64a5d229f90 a2=98 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=329 op=UNLOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=330 op=LOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=64a5d22a268 a2=98 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=331 op=LOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=64a5d229fa8 a2=98 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=331 op=UNLOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=330 op=UNLOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.576000 audit: BPF prog-id=332 op=LOAD Oct 27 13:25:09.576000 audit[7718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=64a5d22a4b8 a2=98 a3=0 items=0 ppid=7707 pid=7718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35343434613234336561333435613630636538623562643434 Oct 27 13:25:09.591673 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:09.599932 kernel: docker0: port 1(vethf5d063a) entered blocking state Oct 27 13:25:09.599997 kernel: docker0: port 1(vethf5d063a) entered disabled state Oct 27 13:25:09.604213 kernel: vethf5d063a: entered allmulticast mode Oct 27 13:25:09.604273 kernel: vethf5d063a: entered promiscuous mode Oct 27 13:25:09.590000 audit: ANOM_PROMISCUOUS dev=vethf5d063a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:09.590000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333d40 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.590000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:09.607000 audit[7739]: NETFILTER_CFG table=raw:153 family=2 entries=1 op=nft_register_rule pid=7739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:09.607000 audit[7739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc39d6590 a2=0 a3=0 items=0 ppid=2508 pid=7739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:09.607000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:09.609118 systemd-networkd[1681]: vethf5d063a: Link UP Oct 27 13:25:09.625588 kernel: eth0: renamed from veth9060a7b Oct 27 13:25:09.625684 kernel: docker0: port 1(vethf5d063a) entered blocking state Oct 27 13:25:09.629448 kernel: docker0: port 1(vethf5d063a) entered forwarding state Oct 27 13:25:09.629682 systemd-networkd[1681]: vethf5d063a: Gained carrier Oct 27 13:25:09.630246 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:10.489398 sshd[7664]: Connection closed by authenticating user root 109.160.32.131 port 56322 [preauth] Oct 27 13:25:10.488000 audit[7664]: AUDIT1109 pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:10.493272 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:10.493345 kernel: audit: type=1109 audit(1793107510.488:1228): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:10.494370 systemd[1]: sshd@45-17-10.0.0.24:22-109.160.32.131:56322.service: Deactivated successfully. Oct 27 13:25:10.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-17-10.0.0.24:22-109.160.32.131:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:10.520131 kernel: audit: type=1131 audit(1793107510.492:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-17-10.0.0.24:22-109.160.32.131:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:10.655523 systemd[1]: docker-5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23.scope: Deactivated successfully. Oct 27 13:25:10.666884 containerd[1962]: time="2026-10-27T13:25:10.666825639Z" level=info msg="shim disconnected" id=5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23 namespace=moby Oct 27 13:25:10.666884 containerd[1962]: time="2026-10-27T13:25:10.666857389Z" level=info msg="cleaning up after shim disconnected" id=5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23 namespace=moby Oct 27 13:25:10.666884 containerd[1962]: time="2026-10-27T13:25:10.666862861Z" level=info msg="cleaning up dead shim" id=5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23 namespace=moby Oct 27 13:25:10.667540 dockerd[2508]: time="2026-10-27T13:25:10.666987013Z" level=info msg="ignoring event" container=5444a243ea345a60ce8b5bd44f8959117253be0dd43b39487565068970156e23 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:10.689365 systemd-networkd[1681]: vethf5d063a: Lost carrier Oct 27 13:25:10.690125 kernel: docker0: port 1(vethf5d063a) entered disabled state Oct 27 13:25:10.690173 kernel: veth9060a7b: renamed from eth0 Oct 27 13:25:10.709000 audit[7774]: NETFILTER_CFG table=raw:154 family=2 entries=1 op=nft_unregister_rule pid=7774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:10.709000 audit[7774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf9de860 a2=0 a3=0 items=0 ppid=2508 pid=7774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:10.736217 kernel: audit: type=1325 audit(1793107510.709:1230): table=raw:154 family=2 entries=1 op=nft_unregister_rule pid=7774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:10.736257 kernel: audit: type=1300 audit(1793107510.709:1230): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf9de860 a2=0 a3=0 items=0 ppid=2508 pid=7774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:10.709000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:10.747564 kernel: audit: type=1327 audit(1793107510.709:1230): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:10.751575 kernel: docker0: port 1(vethf5d063a) entered disabled state Oct 27 13:25:10.749232 systemd-networkd[1681]: vethf5d063a: Link DOWN Oct 27 13:25:10.755342 kernel: vethf5d063a (unregistering): left allmulticast mode Oct 27 13:25:10.759085 kernel: vethf5d063a (unregistering): left promiscuous mode Oct 27 13:25:10.747000 audit: ANOM_PROMISCUOUS dev=vethf5d063a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:10.762635 kernel: docker0: port 1(vethf5d063a) entered disabled state Oct 27 13:25:10.762659 kernel: audit: type=1700 audit(1793107510.747:1231): dev=vethf5d063a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:10.747000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:10.747000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:10.812057 kernel: audit: type=1300 audit(1793107510.747:1231): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:10.812136 kernel: audit: type=1327 audit(1793107510.747:1231): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:10.814253 systemd[1]: run-docker-netns-27fe6352f34a.mount: Deactivated successfully. Oct 27 13:25:10.816888 systemd[1]: var-lib-docker-overlay2-1f65b49cc71507d8f83705db36b44c69e33c66db6014f635c1a4a183a160007a-merged.mount: Deactivated successfully. Oct 27 13:25:10.829000 audit: BPF prog-id=328 op=UNLOAD Oct 27 13:25:10.829000 audit: BPF prog-id=332 op=UNLOAD Oct 27 13:25:10.839189 kernel: audit: type=1334 audit(1793107510.829:1232): prog-id=328 op=UNLOAD Oct 27 13:25:10.839261 kernel: audit: type=1334 audit(1793107510.829:1233): prog-id=332 op=UNLOAD Oct 27 13:25:10.912816 systemd[1]: var-lib-docker-overlay2-0a9d3edf4bad6015e9eb98ccc94733a92992950829ac6cd2e0e11ccf3dd08b66\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:10.977884 containerd[1962]: time="2026-10-27T13:25:10.977845629Z" level=info msg="connecting to shim d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0" address="unix:///run/containerd/s/9c28fd8678639ea05807d0998477828bf2539c894258b904227aee361dc71bb5" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:10.995255 systemd[1]: Started docker-d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0.scope - libcontainer container d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0. Oct 27 13:25:11.002000 audit: BPF prog-id=333 op=LOAD Oct 27 13:25:11.002000 audit: BPF prog-id=334 op=LOAD Oct 27 13:25:11.002000 audit[7802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2dd2ef1e9f90 a2=98 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=334 op=UNLOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=335 op=LOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2dd2ef1ea268 a2=98 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=336 op=LOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2dd2ef1e9fa8 a2=98 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=336 op=UNLOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=335 op=UNLOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.003000 audit: BPF prog-id=337 op=LOAD Oct 27 13:25:11.003000 audit[7802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2dd2ef1ea4b8 a2=98 a3=0 items=0 ppid=7791 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353064653963616139343234636662663064313634373936 Oct 27 13:25:11.021057 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:11.024941 kernel: docker0: port 1(vethefbb2ef) entered blocking state Oct 27 13:25:11.025025 kernel: docker0: port 1(vethefbb2ef) entered disabled state Oct 27 13:25:11.028122 kernel: vethefbb2ef: entered allmulticast mode Oct 27 13:25:11.031269 kernel: vethefbb2ef: entered promiscuous mode Oct 27 13:25:11.016000 audit: ANOM_PROMISCUOUS dev=vethefbb2ef prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:11.016000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7c50 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.016000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:11.032000 audit[7824]: NETFILTER_CFG table=raw:155 family=2 entries=1 op=nft_register_rule pid=7824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:11.032000 audit[7824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff55e3b90 a2=0 a3=0 items=0 ppid=2508 pid=7824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:11.032000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:11.034146 systemd-networkd[1681]: vethefbb2ef: Link UP Oct 27 13:25:11.047108 kernel: eth0: renamed from veth61d62a7 Oct 27 13:25:11.047182 kernel: docker0: port 1(vethefbb2ef) entered blocking state Oct 27 13:25:11.054209 kernel: docker0: port 1(vethefbb2ef) entered forwarding state Oct 27 13:25:11.054606 systemd-networkd[1681]: vethefbb2ef: Gained carrier Oct 27 13:25:11.054805 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:12.081495 systemd[1]: docker-d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0.scope: Deactivated successfully. Oct 27 13:25:12.093319 dockerd[2508]: time="2026-10-27T13:25:12.093273794Z" level=info msg="ignoring event" container=d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:12.093641 containerd[1962]: time="2026-10-27T13:25:12.093488565Z" level=info msg="shim disconnected" id=d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0 namespace=moby Oct 27 13:25:12.093641 containerd[1962]: time="2026-10-27T13:25:12.093518763Z" level=info msg="cleaning up after shim disconnected" id=d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0 namespace=moby Oct 27 13:25:12.093641 containerd[1962]: time="2026-10-27T13:25:12.093524675Z" level=info msg="cleaning up dead shim" id=d50de9caa9424cfbf0d16479672a1b14ee1cfdad5d1bb45bd299eaab218cb1c0 namespace=moby Oct 27 13:25:12.113620 systemd-networkd[1681]: vethefbb2ef: Lost carrier Oct 27 13:25:12.114363 kernel: docker0: port 1(vethefbb2ef) entered disabled state Oct 27 13:25:12.114417 kernel: veth61d62a7: renamed from eth0 Oct 27 13:25:12.130000 audit[7857]: NETFILTER_CFG table=raw:156 family=2 entries=1 op=nft_unregister_rule pid=7857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:12.130000 audit[7857]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe00e3250 a2=0 a3=0 items=0 ppid=2508 pid=7857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.130000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:12.137562 systemd-networkd[1681]: vethefbb2ef: Link DOWN Oct 27 13:25:12.142114 kernel: docker0: port 1(vethefbb2ef) entered disabled state Oct 27 13:25:12.143150 kernel: vethefbb2ef (unregistering): left allmulticast mode Oct 27 13:25:12.149651 kernel: vethefbb2ef (unregistering): left promiscuous mode Oct 27 13:25:12.136000 audit: ANOM_PROMISCUOUS dev=vethefbb2ef prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:12.153112 kernel: docker0: port 1(vethefbb2ef) entered disabled state Oct 27 13:25:12.136000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ceb20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.136000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:12.161060 systemd[1]: run-docker-netns-f12e9952892c.mount: Deactivated successfully. Oct 27 13:25:12.163800 systemd[1]: var-lib-docker-overlay2-0a9d3edf4bad6015e9eb98ccc94733a92992950829ac6cd2e0e11ccf3dd08b66-merged.mount: Deactivated successfully. Oct 27 13:25:12.172000 audit: BPF prog-id=333 op=UNLOAD Oct 27 13:25:12.172000 audit: BPF prog-id=337 op=UNLOAD Oct 27 13:25:12.236643 systemd[1]: var-lib-docker-overlay2-62460aa3c36ab3a06f49e635ae55c7e88e79c975199bd8d3583c5c6fd1125290\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:12.298835 containerd[1962]: time="2026-10-27T13:25:12.298767752Z" level=info msg="connecting to shim 0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001" address="unix:///run/containerd/s/3f039ea63fc75f7e54d7efc2eead0fbcf47716bb2ae6fe4872d7a810d8905965" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:12.317237 systemd[1]: Started docker-0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001.scope - libcontainer container 0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001. Oct 27 13:25:12.324000 audit: BPF prog-id=338 op=LOAD Oct 27 13:25:12.324000 audit: BPF prog-id=339 op=LOAD Oct 27 13:25:12.324000 audit[7887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=564e4abb1f90 a2=98 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.324000 audit: BPF prog-id=339 op=UNLOAD Oct 27 13:25:12.324000 audit[7887]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.325000 audit: BPF prog-id=340 op=LOAD Oct 27 13:25:12.325000 audit[7887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=564e4abb2268 a2=98 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.325000 audit: BPF prog-id=341 op=LOAD Oct 27 13:25:12.325000 audit[7887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=564e4abb1fa8 a2=98 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.325000 audit: BPF prog-id=341 op=UNLOAD Oct 27 13:25:12.325000 audit[7887]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.325000 audit: BPF prog-id=340 op=UNLOAD Oct 27 13:25:12.325000 audit[7887]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.325000 audit: BPF prog-id=342 op=LOAD Oct 27 13:25:12.325000 audit[7887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=564e4abb24b8 a2=98 a3=0 items=0 ppid=7876 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643165303237653463656437353334393961313036386436 Oct 27 13:25:12.346027 kernel: docker0: port 1(veth2f5f902) entered blocking state Oct 27 13:25:12.346110 kernel: docker0: port 1(veth2f5f902) entered disabled state Oct 27 13:25:12.349360 kernel: veth2f5f902: entered allmulticast mode Oct 27 13:25:12.352190 kernel: veth2f5f902: entered promiscuous mode Oct 27 13:25:12.338000 audit: ANOM_PROMISCUOUS dev=veth2f5f902 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:12.338000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c65b30 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.338000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:12.353077 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:12.353000 audit[7909]: NETFILTER_CFG table=raw:157 family=2 entries=1 op=nft_register_rule pid=7909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:12.353000 audit[7909]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd1a145c0 a2=0 a3=0 items=0 ppid=2508 pid=7909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:12.353000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:12.355292 systemd-networkd[1681]: veth2f5f902: Link UP Oct 27 13:25:12.371102 kernel: eth0: renamed from vethbd07257 Oct 27 13:25:12.371185 kernel: docker0: port 1(veth2f5f902) entered blocking state Oct 27 13:25:12.375982 kernel: docker0: port 1(veth2f5f902) entered forwarding state Oct 27 13:25:12.376416 systemd-networkd[1681]: veth2f5f902: Gained carrier Oct 27 13:25:12.377233 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:13.400917 systemd[1]: docker-0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001.scope: Deactivated successfully. Oct 27 13:25:13.413819 dockerd[2508]: time="2026-10-27T13:25:13.413767385Z" level=info msg="ignoring event" container=0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:13.414720 containerd[1962]: time="2026-10-27T13:25:13.414677978Z" level=info msg="shim disconnected" id=0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001 namespace=moby Oct 27 13:25:13.415176 containerd[1962]: time="2026-10-27T13:25:13.414710200Z" level=info msg="cleaning up after shim disconnected" id=0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001 namespace=moby Oct 27 13:25:13.415176 containerd[1962]: time="2026-10-27T13:25:13.414999751Z" level=info msg="cleaning up dead shim" id=0d1e027e4ced753499a1068d60e61da3ca5fcf5a9ade65c20b857e911fc34001 namespace=moby Oct 27 13:25:13.435504 systemd-networkd[1681]: veth2f5f902: Lost carrier Oct 27 13:25:13.436408 kernel: docker0: port 1(veth2f5f902) entered disabled state Oct 27 13:25:13.436469 kernel: vethbd07257: renamed from eth0 Oct 27 13:25:13.451000 audit[7938]: NETFILTER_CFG table=raw:158 family=2 entries=1 op=nft_unregister_rule pid=7938 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:13.451000 audit[7938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd7248b20 a2=0 a3=0 items=0 ppid=2508 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.451000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:13.455690 systemd-networkd[1681]: veth2f5f902: Link DOWN Oct 27 13:25:13.459118 kernel: docker0: port 1(veth2f5f902) entered disabled state Oct 27 13:25:13.465953 kernel: veth2f5f902 (unregistering): left allmulticast mode Oct 27 13:25:13.466011 kernel: veth2f5f902 (unregistering): left promiscuous mode Oct 27 13:25:13.455000 audit: ANOM_PROMISCUOUS dev=veth2f5f902 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:13.469513 kernel: docker0: port 1(veth2f5f902) entered disabled state Oct 27 13:25:13.455000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf280 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.455000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:13.483610 systemd[1]: run-docker-netns-da598366f8b3.mount: Deactivated successfully. Oct 27 13:25:13.486367 systemd[1]: var-lib-docker-overlay2-62460aa3c36ab3a06f49e635ae55c7e88e79c975199bd8d3583c5c6fd1125290-merged.mount: Deactivated successfully. Oct 27 13:25:13.495000 audit: BPF prog-id=338 op=UNLOAD Oct 27 13:25:13.495000 audit: BPF prog-id=342 op=UNLOAD Oct 27 13:25:13.581232 systemd[1]: var-lib-docker-overlay2-e81157f0d95d24e2211a724a274e3f33e8e13e17ce337ac6ccebce6e07809f11\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:13.647277 containerd[1962]: time="2026-10-27T13:25:13.647230733Z" level=info msg="connecting to shim ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c" address="unix:///run/containerd/s/d85b91405bb05d27b5761497519c2bad92e11d1581094814a41a9bfe900bb570" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:13.669258 systemd[1]: Started docker-ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c.scope - libcontainer container ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c. Oct 27 13:25:13.678000 audit: BPF prog-id=343 op=LOAD Oct 27 13:25:13.679000 audit: BPF prog-id=344 op=LOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28aee8a31f90 a2=98 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=344 op=UNLOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=345 op=LOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28aee8a32268 a2=98 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=346 op=LOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=28aee8a31fa8 a2=98 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=346 op=UNLOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=345 op=UNLOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.679000 audit: BPF prog-id=347 op=LOAD Oct 27 13:25:13.679000 audit[7967]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28aee8a324b8 a2=98 a3=0 items=0 ppid=7955 pid=7967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636163396661393232383062393238663733386163383537 Oct 27 13:25:13.698213 kernel: docker0: port 1(vethbeda65f) entered blocking state Oct 27 13:25:13.698294 kernel: docker0: port 1(vethbeda65f) entered disabled state Oct 27 13:25:13.701414 kernel: vethbeda65f: entered allmulticast mode Oct 27 13:25:13.704233 kernel: vethbeda65f: entered promiscuous mode Oct 27 13:25:13.691000 audit: ANOM_PROMISCUOUS dev=vethbeda65f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:13.691000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f170 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.691000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:13.705929 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:13.707000 audit[7988]: NETFILTER_CFG table=raw:159 family=2 entries=1 op=nft_register_rule pid=7988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:13.707000 audit[7988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe64f51e0 a2=0 a3=0 items=0 ppid=2508 pid=7988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:13.707000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:13.708601 systemd-networkd[1681]: vethbeda65f: Link UP Oct 27 13:25:13.722114 kernel: eth0: renamed from vethe150382 Oct 27 13:25:13.722201 kernel: docker0: port 1(vethbeda65f) entered blocking state Oct 27 13:25:13.728590 kernel: docker0: port 1(vethbeda65f) entered forwarding state Oct 27 13:25:13.728829 systemd-networkd[1681]: vethbeda65f: Gained carrier Oct 27 13:25:13.729656 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:14.753086 systemd[1]: docker-ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c.scope: Deactivated successfully. Oct 27 13:25:14.765805 dockerd[2508]: time="2026-10-27T13:25:14.765761120Z" level=info msg="ignoring event" container=ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:14.766847 containerd[1962]: time="2026-10-27T13:25:14.766800298Z" level=info msg="shim disconnected" id=ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c namespace=moby Oct 27 13:25:14.767079 containerd[1962]: time="2026-10-27T13:25:14.766971111Z" level=info msg="cleaning up after shim disconnected" id=ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c namespace=moby Oct 27 13:25:14.767079 containerd[1962]: time="2026-10-27T13:25:14.766985999Z" level=info msg="cleaning up dead shim" id=ccac9fa92280b928f738ac857b75659f276a010ad3c7aa4d69e03660c297550c namespace=moby Oct 27 13:25:14.788784 systemd-networkd[1681]: vethbeda65f: Lost carrier Oct 27 13:25:14.789109 kernel: docker0: port 1(vethbeda65f) entered disabled state Oct 27 13:25:14.789145 kernel: vethe150382: renamed from eth0 Oct 27 13:25:14.811000 audit[8018]: NETFILTER_CFG table=raw:160 family=2 entries=1 op=nft_unregister_rule pid=8018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:14.811000 audit[8018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc332b150 a2=0 a3=0 items=0 ppid=2508 pid=8018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:14.811000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:14.817503 systemd-networkd[1681]: vethbeda65f: Link DOWN Oct 27 13:25:14.821116 kernel: docker0: port 1(vethbeda65f) entered disabled state Oct 27 13:25:14.828603 kernel: vethbeda65f (unregistering): left allmulticast mode Oct 27 13:25:14.828666 kernel: vethbeda65f (unregistering): left promiscuous mode Oct 27 13:25:14.816000 audit: ANOM_PROMISCUOUS dev=vethbeda65f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:14.831980 kernel: docker0: port 1(vethbeda65f) entered disabled state Oct 27 13:25:14.816000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ab80 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:14.816000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:14.838911 systemd[1]: run-docker-netns-31b2502e8822.mount: Deactivated successfully. Oct 27 13:25:14.841770 systemd[1]: var-lib-docker-overlay2-e81157f0d95d24e2211a724a274e3f33e8e13e17ce337ac6ccebce6e07809f11-merged.mount: Deactivated successfully. Oct 27 13:25:14.858000 audit: BPF prog-id=343 op=UNLOAD Oct 27 13:25:14.858000 audit: BPF prog-id=347 op=UNLOAD Oct 27 13:25:14.927185 systemd[1]: var-lib-docker-overlay2-499958cac815187989cfcc321d9292452acd90957c82420a8953a161b8c54d13\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:14.983812 containerd[1962]: time="2026-10-27T13:25:14.983766683Z" level=info msg="connecting to shim c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde" address="unix:///run/containerd/s/f1d5b900969aa5db9316ca38c9682fafab71464fcda1ceddadf1758c5dd16cc4" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:15.004265 systemd[1]: Started docker-c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde.scope - libcontainer container c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde. Oct 27 13:25:15.011000 audit: BPF prog-id=348 op=LOAD Oct 27 13:25:15.011000 audit: BPF prog-id=349 op=LOAD Oct 27 13:25:15.011000 audit[8046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=294f4edb1f90 a2=98 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=349 op=UNLOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=350 op=LOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=294f4edb2268 a2=98 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=351 op=LOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=294f4edb1fa8 a2=98 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=351 op=UNLOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=350 op=UNLOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.012000 audit: BPF prog-id=352 op=LOAD Oct 27 13:25:15.012000 audit[8046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=294f4edb24b8 a2=98 a3=0 items=0 ppid=8035 pid=8046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393135326537363139616439306363336537653536373963 Oct 27 13:25:15.025847 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:15.032088 kernel: docker0: port 1(veth150439e) entered blocking state Oct 27 13:25:15.032176 kernel: docker0: port 1(veth150439e) entered disabled state Oct 27 13:25:15.034810 kernel: veth150439e: entered allmulticast mode Oct 27 13:25:15.037594 kernel: veth150439e: entered promiscuous mode Oct 27 13:25:15.024000 audit: ANOM_PROMISCUOUS dev=veth150439e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:15.024000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472360 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.024000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:15.038000 audit[8067]: NETFILTER_CFG table=raw:161 family=2 entries=1 op=nft_register_rule pid=8067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:15.038000 audit[8067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd42b7800 a2=0 a3=0 items=0 ppid=2508 pid=8067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:15.038000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:15.042393 systemd-networkd[1681]: veth150439e: Link UP Oct 27 13:25:15.052402 systemd[1]: Started sshd@46-18-10.0.0.24:22-109.160.32.131:35882.service - OpenSSH per-connection server daemon (109.160.32.131:35882). Oct 27 13:25:15.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-18-10.0.0.24:22-109.160.32.131:35882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:15.059119 kernel: eth0: renamed from vethcf3e842 Oct 27 13:25:15.067548 kernel: docker0: port 1(veth150439e) entered blocking state Oct 27 13:25:15.067626 kernel: docker0: port 1(veth150439e) entered forwarding state Oct 27 13:25:15.067778 systemd-networkd[1681]: veth150439e: Gained carrier Oct 27 13:25:15.068507 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:16.094931 systemd[1]: docker-c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde.scope: Deactivated successfully. Oct 27 13:25:16.107771 containerd[1962]: time="2026-10-27T13:25:16.107620981Z" level=info msg="shim disconnected" id=c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde namespace=moby Oct 27 13:25:16.107771 containerd[1962]: time="2026-10-27T13:25:16.107656363Z" level=info msg="cleaning up after shim disconnected" id=c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde namespace=moby Oct 27 13:25:16.107771 containerd[1962]: time="2026-10-27T13:25:16.107661762Z" level=info msg="cleaning up dead shim" id=c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde namespace=moby Oct 27 13:25:16.108091 dockerd[2508]: time="2026-10-27T13:25:16.107709623Z" level=info msg="ignoring event" container=c9152e7619ad90cc3e7e5679c5f0471433c4c789593dc0001575502c7decddde module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:16.129822 systemd-networkd[1681]: veth150439e: Lost carrier Oct 27 13:25:16.130404 kernel: docker0: port 1(veth150439e) entered disabled state Oct 27 13:25:16.130440 kernel: vethcf3e842: renamed from eth0 Oct 27 13:25:16.146000 audit[8103]: NETFILTER_CFG table=raw:162 family=2 entries=1 op=nft_unregister_rule pid=8103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:16.150674 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:16.150730 kernel: audit: type=1325 audit(1793107516.146:1287): table=raw:162 family=2 entries=1 op=nft_unregister_rule pid=8103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:16.146000 audit[8103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd31e1080 a2=0 a3=0 items=0 ppid=2508 pid=8103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.176231 kernel: audit: type=1300 audit(1793107516.146:1287): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd31e1080 a2=0 a3=0 items=0 ppid=2508 pid=8103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.146000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:16.188149 kernel: audit: type=1327 audit(1793107516.146:1287): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:16.189079 systemd-networkd[1681]: veth150439e: Link DOWN Oct 27 13:25:16.189221 kernel: docker0: port 1(veth150439e) entered disabled state Oct 27 13:25:16.200767 kernel: veth150439e (unregistering): left allmulticast mode Oct 27 13:25:16.200832 kernel: veth150439e (unregistering): left promiscuous mode Oct 27 13:25:16.187000 audit: ANOM_PROMISCUOUS dev=veth150439e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:16.205229 kernel: docker0: port 1(veth150439e) entered disabled state Oct 27 13:25:16.205256 kernel: audit: type=1700 audit(1793107516.187:1288): dev=veth150439e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:16.187000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2380 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.187000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:16.249479 kernel: audit: type=1300 audit(1793107516.187:1288): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2380 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.249543 kernel: audit: type=1327 audit(1793107516.187:1288): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:16.251291 systemd[1]: run-docker-netns-96cb9bef746d.mount: Deactivated successfully. Oct 27 13:25:16.252224 sshd[8069]: Connection closed by authenticating user root 109.160.32.131 port 35882 [preauth] Oct 27 13:25:16.251000 audit[8069]: AUDIT1109 pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:16.254918 systemd[1]: sshd@46-18-10.0.0.24:22-109.160.32.131:35882.service: Deactivated successfully. Oct 27 13:25:16.267658 systemd[1]: var-lib-docker-overlay2-499958cac815187989cfcc321d9292452acd90957c82420a8953a161b8c54d13-merged.mount: Deactivated successfully. Oct 27 13:25:16.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-18-10.0.0.24:22-109.160.32.131:35882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:16.282542 kernel: audit: type=1109 audit(1793107516.251:1289): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:16.282725 kernel: audit: type=1131 audit(1793107516.256:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-18-10.0.0.24:22-109.160.32.131:35882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:16.290000 audit: BPF prog-id=348 op=UNLOAD Oct 27 13:25:16.290000 audit: BPF prog-id=352 op=UNLOAD Oct 27 13:25:16.299238 kernel: audit: type=1334 audit(1793107516.290:1291): prog-id=348 op=UNLOAD Oct 27 13:25:16.299298 kernel: audit: type=1334 audit(1793107516.290:1292): prog-id=352 op=UNLOAD Oct 27 13:25:16.430541 containerd[1962]: time="2026-10-27T13:25:16.430439062Z" level=info msg="connecting to shim d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b" address="unix:///run/containerd/s/1cd925b713a3bcccc2b8a8a342091f5fef9298645f5ff4be4b9f044f56049df5" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:16.450261 systemd[1]: Started docker-d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b.scope - libcontainer container d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b. Oct 27 13:25:16.457000 audit: BPF prog-id=353 op=LOAD Oct 27 13:25:16.458000 audit: BPF prog-id=354 op=LOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58d1f6db1f90 a2=98 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=354 op=UNLOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=355 op=LOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58d1f6db2268 a2=98 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=356 op=LOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=58d1f6db1fa8 a2=98 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=356 op=UNLOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=355 op=UNLOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.458000 audit: BPF prog-id=357 op=LOAD Oct 27 13:25:16.458000 audit[8134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58d1f6db24b8 a2=98 a3=0 items=0 ppid=8123 pid=8134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306166383838353730663562343939363134643532626134 Oct 27 13:25:16.472450 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:16.478787 kernel: docker0: port 1(veth8a066c0) entered blocking state Oct 27 13:25:16.478868 kernel: docker0: port 1(veth8a066c0) entered disabled state Oct 27 13:25:16.482039 kernel: veth8a066c0: entered allmulticast mode Oct 27 13:25:16.485112 kernel: veth8a066c0: entered promiscuous mode Oct 27 13:25:16.471000 audit: ANOM_PROMISCUOUS dev=veth8a066c0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:16.471000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0b9b590 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.471000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:16.486000 audit[8156]: NETFILTER_CFG table=raw:163 family=2 entries=1 op=nft_register_rule pid=8156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:16.486000 audit[8156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8d186f0 a2=0 a3=0 items=0 ppid=2508 pid=8156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:16.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:16.488219 systemd-networkd[1681]: veth8a066c0: Link UP Oct 27 13:25:16.504779 kernel: eth0: renamed from veth23aa50e Oct 27 13:25:16.504872 kernel: docker0: port 1(veth8a066c0) entered blocking state Oct 27 13:25:16.508558 kernel: docker0: port 1(veth8a066c0) entered forwarding state Oct 27 13:25:16.509051 systemd-networkd[1681]: veth8a066c0: Gained carrier Oct 27 13:25:16.509286 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:17.534837 systemd[1]: docker-d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b.scope: Deactivated successfully. Oct 27 13:25:17.547135 dockerd[2508]: time="2026-10-27T13:25:17.546748047Z" level=info msg="ignoring event" container=d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:17.547683 containerd[1962]: time="2026-10-27T13:25:17.547318301Z" level=info msg="shim disconnected" id=d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b namespace=moby Oct 27 13:25:17.547683 containerd[1962]: time="2026-10-27T13:25:17.547345571Z" level=info msg="cleaning up after shim disconnected" id=d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b namespace=moby Oct 27 13:25:17.547683 containerd[1962]: time="2026-10-27T13:25:17.547351299Z" level=info msg="cleaning up dead shim" id=d0af888570f5b499614d52ba4c4561ff65633a64d43d2ddf641122ca8d69b70b namespace=moby Oct 27 13:25:17.567117 kernel: veth23aa50e: renamed from eth0 Oct 27 13:25:17.567206 kernel: docker0: port 1(veth8a066c0) entered disabled state Oct 27 13:25:17.570653 systemd-networkd[1681]: veth8a066c0: Lost carrier Oct 27 13:25:17.583000 audit[8185]: NETFILTER_CFG table=raw:164 family=2 entries=1 op=nft_unregister_rule pid=8185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:17.583000 audit[8185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe25ac7d0 a2=0 a3=0 items=0 ppid=2508 pid=8185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:17.588567 systemd-networkd[1681]: veth8a066c0: Link DOWN Oct 27 13:25:17.593114 kernel: docker0: port 1(veth8a066c0) entered disabled state Oct 27 13:25:17.600479 kernel: veth8a066c0 (unregistering): left allmulticast mode Oct 27 13:25:17.600540 kernel: veth8a066c0 (unregistering): left promiscuous mode Oct 27 13:25:17.587000 audit: ANOM_PROMISCUOUS dev=veth8a066c0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:17.604270 kernel: docker0: port 1(veth8a066c0) entered disabled state Oct 27 13:25:17.587000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159b980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.587000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:17.617073 systemd[1]: run-docker-netns-3c2125d83b10.mount: Deactivated successfully. Oct 27 13:25:17.620086 systemd[1]: var-lib-docker-overlay2-19b9a4a14cc6c5def82ce0b8e341b24b1f10ff7384e67ac3833f6ddd1f3bad6a-merged.mount: Deactivated successfully. Oct 27 13:25:17.628000 audit: BPF prog-id=353 op=UNLOAD Oct 27 13:25:17.628000 audit: BPF prog-id=357 op=UNLOAD Oct 27 13:25:17.781490 containerd[1962]: time="2026-10-27T13:25:17.781430978Z" level=info msg="connecting to shim 59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4" address="unix:///run/containerd/s/dc3f568cff57303838d11d1ec6c536d5bffe15cf51b937faf30e611fbc2dbd8f" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:17.797249 systemd[1]: Started docker-59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4.scope - libcontainer container 59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4. Oct 27 13:25:17.804000 audit: BPF prog-id=358 op=LOAD Oct 27 13:25:17.805000 audit: BPF prog-id=359 op=LOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1186ffb69f90 a2=98 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=359 op=UNLOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=360 op=LOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1186ffb6a268 a2=98 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=361 op=LOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1186ffb69fa8 a2=98 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=361 op=UNLOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=360 op=UNLOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.805000 audit: BPF prog-id=362 op=LOAD Oct 27 13:25:17.805000 audit[8213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1186ffb6a4b8 a2=98 a3=0 items=0 ppid=8202 pid=8213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396337383531396263343938393031386532346438303133 Oct 27 13:25:17.825104 kernel: docker0: port 1(veth06fdf6e) entered blocking state Oct 27 13:25:17.825194 kernel: docker0: port 1(veth06fdf6e) entered disabled state Oct 27 13:25:17.827913 kernel: veth06fdf6e: entered allmulticast mode Oct 27 13:25:17.830969 kernel: veth06fdf6e: entered promiscuous mode Oct 27 13:25:17.816000 audit: ANOM_PROMISCUOUS dev=veth06fdf6e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:17.816000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332990 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.816000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:17.831623 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:17.832000 audit[8239]: NETFILTER_CFG table=raw:165 family=2 entries=1 op=nft_register_rule pid=8239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:17.832000 audit[8239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcf3ec3a0 a2=0 a3=0 items=0 ppid=2508 pid=8239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:17.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:17.835265 systemd-networkd[1681]: veth06fdf6e: Link UP Oct 27 13:25:17.849116 kernel: eth0: renamed from veth0400035 Oct 27 13:25:17.856762 kernel: docker0: port 1(veth06fdf6e) entered blocking state Oct 27 13:25:17.856830 kernel: docker0: port 1(veth06fdf6e) entered forwarding state Oct 27 13:25:17.856852 systemd-networkd[1681]: veth06fdf6e: Gained carrier Oct 27 13:25:17.857533 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:18.884158 systemd[1]: docker-59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4.scope: Deactivated successfully. Oct 27 13:25:18.898982 dockerd[2508]: time="2026-10-27T13:25:18.898945891Z" level=info msg="ignoring event" container=59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:18.899335 containerd[1962]: time="2026-10-27T13:25:18.899128008Z" level=info msg="shim disconnected" id=59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4 namespace=moby Oct 27 13:25:18.899335 containerd[1962]: time="2026-10-27T13:25:18.899154575Z" level=info msg="cleaning up after shim disconnected" id=59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4 namespace=moby Oct 27 13:25:18.899335 containerd[1962]: time="2026-10-27T13:25:18.899159926Z" level=info msg="cleaning up dead shim" id=59c78519bc4989018e24d80135d8d3140a91fcb63155c5e49ea6a2bb16b167b4 namespace=moby Oct 27 13:25:18.919400 systemd-networkd[1681]: veth06fdf6e: Lost carrier Oct 27 13:25:18.920130 kernel: docker0: port 1(veth06fdf6e) entered disabled state Oct 27 13:25:18.920186 kernel: veth0400035: renamed from eth0 Oct 27 13:25:18.935000 audit[8271]: NETFILTER_CFG table=raw:166 family=2 entries=1 op=nft_unregister_rule pid=8271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:18.935000 audit[8271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdf198400 a2=0 a3=0 items=0 ppid=2508 pid=8271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:18.935000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:18.939498 systemd-networkd[1681]: veth06fdf6e: Link DOWN Oct 27 13:25:18.945118 kernel: docker0: port 1(veth06fdf6e) entered disabled state Oct 27 13:25:18.945183 kernel: veth06fdf6e (unregistering): left allmulticast mode Oct 27 13:25:18.950984 kernel: veth06fdf6e (unregistering): left promiscuous mode Oct 27 13:25:18.938000 audit: ANOM_PROMISCUOUS dev=veth06fdf6e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:18.954499 kernel: docker0: port 1(veth06fdf6e) entered disabled state Oct 27 13:25:18.938000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3480 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:18.938000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:18.964234 systemd[1]: run-docker-netns-3658be9be41c.mount: Deactivated successfully. Oct 27 13:25:18.968477 systemd[1]: var-lib-docker-overlay2-8eaf995767dadcdbb92c9ee826b7e4159e694bff397ebbbf01383ffaab3034f6-merged.mount: Deactivated successfully. Oct 27 13:25:18.975000 audit: BPF prog-id=358 op=UNLOAD Oct 27 13:25:18.975000 audit: BPF prog-id=362 op=UNLOAD Oct 27 13:25:19.033628 systemd[1]: var-lib-docker-overlay2-f56a4d959b34c756ab94c287d06680608c6c615885f8f94c4b6de273117ac53e\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:19.106596 containerd[1962]: time="2026-10-27T13:25:19.106550730Z" level=info msg="connecting to shim 12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811" address="unix:///run/containerd/s/16f05f343ffd72ff0b92fb59c3ce6c082203c59d63a486151defb5948678378e" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:19.129267 systemd[1]: Started docker-12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811.scope - libcontainer container 12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811. Oct 27 13:25:19.137000 audit: BPF prog-id=363 op=LOAD Oct 27 13:25:19.137000 audit: BPF prog-id=364 op=LOAD Oct 27 13:25:19.137000 audit[8298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=389ab1039f90 a2=98 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.137000 audit: BPF prog-id=364 op=UNLOAD Oct 27 13:25:19.137000 audit[8298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.137000 audit: BPF prog-id=365 op=LOAD Oct 27 13:25:19.137000 audit[8298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=389ab103a268 a2=98 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.138000 audit: BPF prog-id=366 op=LOAD Oct 27 13:25:19.138000 audit[8298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=389ab1039fa8 a2=98 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.138000 audit: BPF prog-id=366 op=UNLOAD Oct 27 13:25:19.138000 audit[8298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.138000 audit: BPF prog-id=365 op=UNLOAD Oct 27 13:25:19.138000 audit[8298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.138000 audit: BPF prog-id=367 op=LOAD Oct 27 13:25:19.138000 audit[8298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=389ab103a4b8 a2=98 a3=0 items=0 ppid=8287 pid=8298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31326362613137343061323266663031656637613166343231 Oct 27 13:25:19.152740 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:19.159392 kernel: docker0: port 1(veth4b8bb20) entered blocking state Oct 27 13:25:19.159469 kernel: docker0: port 1(veth4b8bb20) entered disabled state Oct 27 13:25:19.162197 kernel: veth4b8bb20: entered allmulticast mode Oct 27 13:25:19.165118 kernel: veth4b8bb20: entered promiscuous mode Oct 27 13:25:19.150000 audit: ANOM_PROMISCUOUS dev=veth4b8bb20 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:19.150000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b65a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.150000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:19.166000 audit[8319]: NETFILTER_CFG table=raw:167 family=2 entries=1 op=nft_register_rule pid=8319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:19.166000 audit[8319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4e68c40 a2=0 a3=0 items=0 ppid=2508 pid=8319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:19.166000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:19.169186 systemd-networkd[1681]: veth4b8bb20: Link UP Oct 27 13:25:19.185117 kernel: eth0: renamed from veth9a0996b Oct 27 13:25:19.185211 kernel: docker0: port 1(veth4b8bb20) entered blocking state Oct 27 13:25:19.189248 kernel: docker0: port 1(veth4b8bb20) entered forwarding state Oct 27 13:25:19.189589 systemd-networkd[1681]: veth4b8bb20: Gained carrier Oct 27 13:25:19.189907 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:20.213942 systemd[1]: docker-12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811.scope: Deactivated successfully. Oct 27 13:25:20.226018 dockerd[2508]: time="2026-10-27T13:25:20.225970743Z" level=info msg="ignoring event" container=12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:20.226671 containerd[1962]: time="2026-10-27T13:25:20.225993565Z" level=info msg="shim disconnected" id=12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811 namespace=moby Oct 27 13:25:20.226671 containerd[1962]: time="2026-10-27T13:25:20.226435338Z" level=info msg="cleaning up after shim disconnected" id=12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811 namespace=moby Oct 27 13:25:20.226671 containerd[1962]: time="2026-10-27T13:25:20.226443618Z" level=info msg="cleaning up dead shim" id=12cba1740a22ff01ef7a1f4215034e99eb92bc3577204eca6f93d7b976914811 namespace=moby Oct 27 13:25:20.248743 systemd-networkd[1681]: veth4b8bb20: Lost carrier Oct 27 13:25:20.249122 kernel: docker0: port 1(veth4b8bb20) entered disabled state Oct 27 13:25:20.249167 kernel: veth9a0996b: renamed from eth0 Oct 27 13:25:20.262000 audit[8351]: NETFILTER_CFG table=raw:168 family=2 entries=1 op=nft_unregister_rule pid=8351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:20.262000 audit[8351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe2f7f710 a2=0 a3=0 items=0 ppid=2508 pid=8351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.262000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:20.272564 systemd-networkd[1681]: veth4b8bb20: Link DOWN Oct 27 13:25:20.276119 kernel: docker0: port 1(veth4b8bb20) entered disabled state Oct 27 13:25:20.283288 kernel: veth4b8bb20 (unregistering): left allmulticast mode Oct 27 13:25:20.283349 kernel: veth4b8bb20 (unregistering): left promiscuous mode Oct 27 13:25:20.271000 audit: ANOM_PROMISCUOUS dev=veth4b8bb20 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:20.286633 kernel: docker0: port 1(veth4b8bb20) entered disabled state Oct 27 13:25:20.271000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775f20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.271000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:20.293891 systemd[1]: run-docker-netns-a337ed0f4370.mount: Deactivated successfully. Oct 27 13:25:20.297479 systemd[1]: var-lib-docker-overlay2-f56a4d959b34c756ab94c287d06680608c6c615885f8f94c4b6de273117ac53e-merged.mount: Deactivated successfully. Oct 27 13:25:20.309000 audit: BPF prog-id=363 op=UNLOAD Oct 27 13:25:20.309000 audit: BPF prog-id=367 op=UNLOAD Oct 27 13:25:20.376425 systemd[1]: var-lib-docker-overlay2-af3319babef454839bbeb6f244d30b08c14d6854b5469465f801d78e5b6d79ac\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:20.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4126-10.0.0.24:22-109.160.32.131:35922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:20.420113 systemd[1]: Started sshd@47-4126-10.0.0.24:22-109.160.32.131:35922.service - OpenSSH per-connection server daemon (109.160.32.131:35922). Oct 27 13:25:20.447027 containerd[1962]: time="2026-10-27T13:25:20.446942979Z" level=info msg="connecting to shim 7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612" address="unix:///run/containerd/s/19405c781eae220fb97114725ef956caecedf0fd3ee0769e38eb1fe975d8f464" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:20.467259 systemd[1]: Started docker-7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612.scope - libcontainer container 7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612. Oct 27 13:25:20.475000 audit: BPF prog-id=368 op=LOAD Oct 27 13:25:20.475000 audit: BPF prog-id=369 op=LOAD Oct 27 13:25:20.475000 audit[8382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=63af3b931f90 a2=98 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.475000 audit: BPF prog-id=369 op=UNLOAD Oct 27 13:25:20.475000 audit[8382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.475000 audit: BPF prog-id=370 op=LOAD Oct 27 13:25:20.475000 audit[8382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=63af3b932268 a2=98 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.476000 audit: BPF prog-id=371 op=LOAD Oct 27 13:25:20.476000 audit[8382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=63af3b931fa8 a2=98 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.476000 audit: BPF prog-id=371 op=UNLOAD Oct 27 13:25:20.476000 audit[8382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.476000 audit: BPF prog-id=370 op=UNLOAD Oct 27 13:25:20.476000 audit[8382]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.476000 audit: BPF prog-id=372 op=LOAD Oct 27 13:25:20.476000 audit[8382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=63af3b9324b8 a2=98 a3=0 items=0 ppid=8371 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363331643665393839306332643238353261303537383863 Oct 27 13:25:20.488316 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:20.495484 kernel: docker0: port 1(vethd16d13e) entered blocking state Oct 27 13:25:20.495561 kernel: docker0: port 1(vethd16d13e) entered disabled state Oct 27 13:25:20.498328 kernel: vethd16d13e: entered allmulticast mode Oct 27 13:25:20.501629 kernel: vethd16d13e: entered promiscuous mode Oct 27 13:25:20.486000 audit: ANOM_PROMISCUOUS dev=vethd16d13e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:20.486000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046270 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:20.503000 audit[8403]: NETFILTER_CFG table=raw:169 family=2 entries=1 op=nft_register_rule pid=8403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:20.503000 audit[8403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcdee7f70 a2=0 a3=0 items=0 ppid=2508 pid=8403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:20.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:20.505730 systemd-networkd[1681]: vethd16d13e: Link UP Oct 27 13:25:20.520115 kernel: eth0: renamed from vethf6c61ce Oct 27 13:25:20.526590 kernel: docker0: port 1(vethd16d13e) entered blocking state Oct 27 13:25:20.526649 kernel: docker0: port 1(vethd16d13e) entered forwarding state Oct 27 13:25:20.526921 systemd-networkd[1681]: vethd16d13e: Gained carrier Oct 27 13:25:20.527553 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:21.091075 sshd[8360]: Invalid user zabbix from 109.160.32.131 port 35922 Oct 27 13:25:21.277304 sshd[8360]: Connection closed by invalid user zabbix 109.160.32.131 port 35922 [preauth] Oct 27 13:25:21.276000 audit[8360]: AUDIT1109 pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:21.281278 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:21.281377 kernel: audit: type=1109 audit(1793107521.276:1346): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:21.286406 systemd[1]: sshd@47-4126-10.0.0.24:22-109.160.32.131:35922.service: Deactivated successfully. Oct 27 13:25:21.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4126-10.0.0.24:22-109.160.32.131:35922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:21.308307 kernel: audit: type=1131 audit(1793107521.285:1347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4126-10.0.0.24:22-109.160.32.131:35922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:21.551483 systemd[1]: docker-7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612.scope: Deactivated successfully. Oct 27 13:25:21.562659 dockerd[2508]: time="2026-10-27T13:25:21.562616575Z" level=info msg="ignoring event" container=7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:21.562977 containerd[1962]: time="2026-10-27T13:25:21.562716881Z" level=info msg="shim disconnected" id=7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612 namespace=moby Oct 27 13:25:21.562977 containerd[1962]: time="2026-10-27T13:25:21.562760414Z" level=info msg="cleaning up after shim disconnected" id=7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612 namespace=moby Oct 27 13:25:21.562977 containerd[1962]: time="2026-10-27T13:25:21.562768806Z" level=info msg="cleaning up dead shim" id=7631d6e9890c2d2852a05788c37c7ca2084d2d6272d1d53d37233ee667a51612 namespace=moby Oct 27 13:25:21.582040 systemd-networkd[1681]: vethd16d13e: Lost carrier Oct 27 13:25:21.582350 kernel: docker0: port 1(vethd16d13e) entered disabled state Oct 27 13:25:21.582379 kernel: vethf6c61ce: renamed from eth0 Oct 27 13:25:21.599000 audit[8436]: NETFILTER_CFG table=raw:170 family=2 entries=1 op=nft_unregister_rule pid=8436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:21.610116 kernel: audit: type=1325 audit(1793107521.599:1348): table=raw:170 family=2 entries=1 op=nft_unregister_rule pid=8436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:21.599000 audit[8436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc624f740 a2=0 a3=0 items=0 ppid=2508 pid=8436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.610272 kernel: audit: type=1300 audit(1793107521.599:1348): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc624f740 a2=0 a3=0 items=0 ppid=2508 pid=8436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.627636 systemd-networkd[1681]: vethd16d13e: Link DOWN Oct 27 13:25:21.599000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:21.638873 kernel: audit: type=1327 audit(1793107521.599:1348): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:21.638914 kernel: docker0: port 1(vethd16d13e) entered disabled state Oct 27 13:25:21.650233 kernel: vethd16d13e (unregistering): left allmulticast mode Oct 27 13:25:21.650297 kernel: vethd16d13e (unregistering): left promiscuous mode Oct 27 13:25:21.626000 audit: ANOM_PROMISCUOUS dev=vethd16d13e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:21.655221 kernel: docker0: port 1(vethd16d13e) entered disabled state Oct 27 13:25:21.655255 kernel: audit: type=1700 audit(1793107521.626:1349): dev=vethd16d13e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:21.626000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053880 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.626000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:21.700362 kernel: audit: type=1300 audit(1793107521.626:1349): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053880 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.700442 kernel: audit: type=1327 audit(1793107521.626:1349): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:21.702950 systemd[1]: run-docker-netns-91e5f28b695b.mount: Deactivated successfully. Oct 27 13:25:21.706080 systemd[1]: var-lib-docker-overlay2-af3319babef454839bbeb6f244d30b08c14d6854b5469465f801d78e5b6d79ac-merged.mount: Deactivated successfully. Oct 27 13:25:21.719000 audit: BPF prog-id=368 op=UNLOAD Oct 27 13:25:21.719000 audit: BPF prog-id=372 op=UNLOAD Oct 27 13:25:21.729005 kernel: audit: type=1334 audit(1793107521.719:1350): prog-id=368 op=UNLOAD Oct 27 13:25:21.729051 kernel: audit: type=1334 audit(1793107521.719:1351): prog-id=372 op=UNLOAD Oct 27 13:25:21.837298 containerd[1962]: time="2026-10-27T13:25:21.836421339Z" level=info msg="connecting to shim 7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095" address="unix:///run/containerd/s/19bb57f178a4879b8e4422fe7386198ae6bb559ce13d3bc707883dd364358633" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:21.853256 systemd[1]: Started docker-7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095.scope - libcontainer container 7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095. Oct 27 13:25:21.860000 audit: BPF prog-id=373 op=LOAD Oct 27 13:25:21.861000 audit: BPF prog-id=374 op=LOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1ed88fc31f90 a2=98 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=374 op=UNLOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=375 op=LOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1ed88fc32268 a2=98 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=376 op=LOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=1ed88fc31fa8 a2=98 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=376 op=UNLOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=375 op=UNLOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.861000 audit: BPF prog-id=377 op=LOAD Oct 27 13:25:21.861000 audit[8466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1ed88fc324b8 a2=98 a3=0 items=0 ppid=8454 pid=8466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643063623566386266396435363738343133386632363730 Oct 27 13:25:21.874564 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:21.882113 kernel: docker0: port 1(veth2358258) entered blocking state Oct 27 13:25:21.882202 kernel: docker0: port 1(veth2358258) entered disabled state Oct 27 13:25:21.884877 kernel: veth2358258: entered allmulticast mode Oct 27 13:25:21.887860 kernel: veth2358258: entered promiscuous mode Oct 27 13:25:21.873000 audit: ANOM_PROMISCUOUS dev=veth2358258 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:21.873000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c65aa0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.873000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:21.890000 audit[8488]: NETFILTER_CFG table=raw:171 family=2 entries=1 op=nft_register_rule pid=8488 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:21.890000 audit[8488]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdeb21e10 a2=0 a3=0 items=0 ppid=2508 pid=8488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:21.890000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:21.892727 systemd-networkd[1681]: veth2358258: Link UP Oct 27 13:25:21.913043 kernel: eth0: renamed from veth1759e4a Oct 27 13:25:21.913128 kernel: docker0: port 1(veth2358258) entered blocking state Oct 27 13:25:21.913154 kernel: docker0: port 1(veth2358258) entered forwarding state Oct 27 13:25:21.913378 systemd-networkd[1681]: veth2358258: Gained carrier Oct 27 13:25:21.913965 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:22.941636 systemd[1]: docker-7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095.scope: Deactivated successfully. Oct 27 13:25:22.953797 containerd[1962]: time="2026-10-27T13:25:22.953747914Z" level=info msg="shim disconnected" id=7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095 namespace=moby Oct 27 13:25:22.953797 containerd[1962]: time="2026-10-27T13:25:22.953777016Z" level=info msg="cleaning up after shim disconnected" id=7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095 namespace=moby Oct 27 13:25:22.953797 containerd[1962]: time="2026-10-27T13:25:22.953785464Z" level=info msg="cleaning up dead shim" id=7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095 namespace=moby Oct 27 13:25:22.954192 dockerd[2508]: time="2026-10-27T13:25:22.953757858Z" level=info msg="ignoring event" container=7d0cb5f8bf9d56784138f2670d5e104362fd5bd384c4bd69092414ff2da1e095 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:22.975436 systemd-networkd[1681]: veth2358258: Lost carrier Oct 27 13:25:22.976112 kernel: docker0: port 1(veth2358258) entered disabled state Oct 27 13:25:22.976150 kernel: veth1759e4a: renamed from eth0 Oct 27 13:25:22.992000 audit[8519]: NETFILTER_CFG table=raw:172 family=2 entries=1 op=nft_unregister_rule pid=8519 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:22.992000 audit[8519]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd84a58b0 a2=0 a3=0 items=0 ppid=2508 pid=8519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:22.992000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:22.999527 systemd-networkd[1681]: veth2358258: Link DOWN Oct 27 13:25:23.007759 kernel: docker0: port 1(veth2358258) entered disabled state Oct 27 13:25:23.007834 kernel: veth2358258 (unregistering): left allmulticast mode Oct 27 13:25:22.998000 audit: ANOM_PROMISCUOUS dev=veth2358258 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:23.012319 kernel: veth2358258 (unregistering): left promiscuous mode Oct 27 13:25:23.012352 kernel: docker0: port 1(veth2358258) entered disabled state Oct 27 13:25:22.998000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a43e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:22.998000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:23.027057 systemd[1]: run-docker-netns-2b02eda70135.mount: Deactivated successfully. Oct 27 13:25:23.029467 systemd[1]: var-lib-docker-overlay2-eb59ab39fc647fc86a600b0ed8cd90ca433557fe3329fe46ab37705b4a2472d0-merged.mount: Deactivated successfully. Oct 27 13:25:23.037000 audit: BPF prog-id=373 op=UNLOAD Oct 27 13:25:23.037000 audit: BPF prog-id=377 op=UNLOAD Oct 27 13:25:23.122756 systemd[1]: var-lib-docker-overlay2-f0e11bd2f5a6e69f9c009a7a9a13de26bf94542ede9eabc6c7035be40678c6cc\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:23.189617 containerd[1962]: time="2026-10-27T13:25:23.189544968Z" level=info msg="connecting to shim 10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41" address="unix:///run/containerd/s/88b8acc5f4858fc25073453a625f375a74a8402dfc652bf97f12e04332bbffd2" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:23.207268 systemd[1]: Started docker-10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41.scope - libcontainer container 10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41. Oct 27 13:25:23.215000 audit: BPF prog-id=378 op=LOAD Oct 27 13:25:23.215000 audit: BPF prog-id=379 op=LOAD Oct 27 13:25:23.215000 audit[8548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43cb43e0df90 a2=98 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.215000 audit: BPF prog-id=379 op=UNLOAD Oct 27 13:25:23.215000 audit[8548]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.215000 audit: BPF prog-id=380 op=LOAD Oct 27 13:25:23.215000 audit[8548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43cb43e0e268 a2=98 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.216000 audit: BPF prog-id=381 op=LOAD Oct 27 13:25:23.216000 audit[8548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=43cb43e0dfa8 a2=98 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.216000 audit: BPF prog-id=381 op=UNLOAD Oct 27 13:25:23.216000 audit[8548]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.216000 audit: BPF prog-id=380 op=UNLOAD Oct 27 13:25:23.216000 audit[8548]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.216000 audit: BPF prog-id=382 op=LOAD Oct 27 13:25:23.216000 audit[8548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=43cb43e0e4b8 a2=98 a3=0 items=0 ppid=8536 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31306562663163346136316238303666363930623765386463 Oct 27 13:25:23.230836 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:23.237403 kernel: docker0: port 1(vethc3580a1) entered blocking state Oct 27 13:25:23.237478 kernel: docker0: port 1(vethc3580a1) entered disabled state Oct 27 13:25:23.240516 kernel: vethc3580a1: entered allmulticast mode Oct 27 13:25:23.244254 kernel: vethc3580a1: entered promiscuous mode Oct 27 13:25:23.228000 audit: ANOM_PROMISCUOUS dev=vethc3580a1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:23.228000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046720 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.228000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:23.245000 audit[8569]: NETFILTER_CFG table=raw:173 family=2 entries=1 op=nft_register_rule pid=8569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:23.245000 audit[8569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff2dd40f0 a2=0 a3=0 items=0 ppid=2508 pid=8569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:23.245000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:23.247701 systemd-networkd[1681]: vethc3580a1: Link UP Oct 27 13:25:23.268605 kernel: eth0: renamed from veth5790287 Oct 27 13:25:23.268702 kernel: docker0: port 1(vethc3580a1) entered blocking state Oct 27 13:25:23.268723 kernel: docker0: port 1(vethc3580a1) entered forwarding state Oct 27 13:25:23.269126 systemd-networkd[1681]: vethc3580a1: Gained carrier Oct 27 13:25:23.269838 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:24.294347 systemd[1]: docker-10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41.scope: Deactivated successfully. Oct 27 13:25:24.308017 dockerd[2508]: time="2026-10-27T13:25:24.307979572Z" level=info msg="ignoring event" container=10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:24.308551 containerd[1962]: time="2026-10-27T13:25:24.308175472Z" level=info msg="shim disconnected" id=10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41 namespace=moby Oct 27 13:25:24.308551 containerd[1962]: time="2026-10-27T13:25:24.308201334Z" level=info msg="cleaning up after shim disconnected" id=10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41 namespace=moby Oct 27 13:25:24.308551 containerd[1962]: time="2026-10-27T13:25:24.308206494Z" level=info msg="cleaning up dead shim" id=10ebf1c4a61b806f690b7e8dcdc70c8147be5691b70049831c3badd8ebef4b41 namespace=moby Oct 27 13:25:24.328488 systemd-networkd[1681]: vethc3580a1: Lost carrier Oct 27 13:25:24.331897 kernel: docker0: port 1(vethc3580a1) entered disabled state Oct 27 13:25:24.331964 kernel: veth5790287: renamed from eth0 Oct 27 13:25:24.344000 audit[8601]: NETFILTER_CFG table=raw:174 family=2 entries=1 op=nft_unregister_rule pid=8601 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:24.344000 audit[8601]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3dd5a30 a2=0 a3=0 items=0 ppid=2508 pid=8601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.344000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:24.354641 systemd-networkd[1681]: vethc3580a1: Link DOWN Oct 27 13:25:24.362430 kernel: docker0: port 1(vethc3580a1) entered disabled state Oct 27 13:25:24.362499 kernel: vethc3580a1 (unregistering): left allmulticast mode Oct 27 13:25:24.366007 kernel: vethc3580a1 (unregistering): left promiscuous mode Oct 27 13:25:24.353000 audit: ANOM_PROMISCUOUS dev=vethc3580a1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:24.369681 kernel: docker0: port 1(vethc3580a1) entered disabled state Oct 27 13:25:24.353000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a5a00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.353000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:24.382693 systemd[1]: run-docker-netns-4a3a877b1cbf.mount: Deactivated successfully. Oct 27 13:25:24.385437 systemd[1]: var-lib-docker-overlay2-f0e11bd2f5a6e69f9c009a7a9a13de26bf94542ede9eabc6c7035be40678c6cc-merged.mount: Deactivated successfully. Oct 27 13:25:24.392000 audit: BPF prog-id=378 op=UNLOAD Oct 27 13:25:24.392000 audit: BPF prog-id=382 op=UNLOAD Oct 27 13:25:24.539118 containerd[1962]: time="2026-10-27T13:25:24.539068984Z" level=info msg="connecting to shim 31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6" address="unix:///run/containerd/s/cc8e4e96069c0de681da967c515df13ba984cb63953987a4eac83f36a32f4821" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:24.559410 systemd[1]: Started docker-31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6.scope - libcontainer container 31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6. Oct 27 13:25:24.568000 audit: BPF prog-id=383 op=LOAD Oct 27 13:25:24.568000 audit: BPF prog-id=384 op=LOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7029c9c33f90 a2=98 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=384 op=UNLOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=385 op=LOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7029c9c34268 a2=98 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=386 op=LOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=7029c9c33fa8 a2=98 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=386 op=UNLOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=385 op=UNLOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.568000 audit: BPF prog-id=387 op=LOAD Oct 27 13:25:24.568000 audit[8630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7029c9c344b8 a2=98 a3=0 items=0 ppid=8619 pid=8630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33316439316430653666613739356266393134613864363337 Oct 27 13:25:24.581383 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:24.588502 kernel: docker0: port 1(veth43987f3) entered blocking state Oct 27 13:25:24.588590 kernel: docker0: port 1(veth43987f3) entered disabled state Oct 27 13:25:24.591464 kernel: veth43987f3: entered allmulticast mode Oct 27 13:25:24.594315 kernel: veth43987f3: entered promiscuous mode Oct 27 13:25:24.580000 audit: ANOM_PROMISCUOUS dev=veth43987f3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:24.580000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121ef00 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.580000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:24.595000 audit[8651]: NETFILTER_CFG table=raw:175 family=2 entries=1 op=nft_register_rule pid=8651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:24.595000 audit[8651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff51a2c30 a2=0 a3=0 items=0 ppid=2508 pid=8651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:24.595000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:24.597448 systemd-networkd[1681]: veth43987f3: Link UP Oct 27 13:25:24.611121 kernel: eth0: renamed from veth06d53b5 Oct 27 13:25:24.619135 kernel: docker0: port 1(veth43987f3) entered blocking state Oct 27 13:25:24.619293 kernel: docker0: port 1(veth43987f3) entered forwarding state Oct 27 13:25:24.619219 systemd-networkd[1681]: veth43987f3: Gained carrier Oct 27 13:25:24.620189 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:25.649481 systemd[1]: Started sshd@48-19-10.0.0.24:22-109.160.32.131:34378.service - OpenSSH per-connection server daemon (109.160.32.131:34378). Oct 27 13:25:25.649939 systemd[1]: docker-31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6.scope: Deactivated successfully. Oct 27 13:25:25.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-19-10.0.0.24:22-109.160.32.131:34378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:25.663982 dockerd[2508]: time="2026-10-27T13:25:25.663925069Z" level=info msg="ignoring event" container=31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:25.665905 containerd[1962]: time="2026-10-27T13:25:25.665877430Z" level=info msg="shim disconnected" id=31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6 namespace=moby Oct 27 13:25:25.666402 containerd[1962]: time="2026-10-27T13:25:25.666158101Z" level=info msg="cleaning up after shim disconnected" id=31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6 namespace=moby Oct 27 13:25:25.666402 containerd[1962]: time="2026-10-27T13:25:25.666172676Z" level=info msg="cleaning up dead shim" id=31d91d0e6fa795bf914a8d637d8ce14c972f8336b44fccaba99366c096b039a6 namespace=moby Oct 27 13:25:25.690159 kernel: docker0: port 1(veth43987f3) entered disabled state Oct 27 13:25:25.690296 systemd-networkd[1681]: veth43987f3: Lost carrier Oct 27 13:25:25.694123 kernel: veth06d53b5: renamed from eth0 Oct 27 13:25:25.706000 audit[8685]: NETFILTER_CFG table=raw:176 family=2 entries=1 op=nft_unregister_rule pid=8685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:25.706000 audit[8685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffa484eb0 a2=0 a3=0 items=0 ppid=2508 pid=8685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.706000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:25.711502 systemd-networkd[1681]: veth43987f3: Link DOWN Oct 27 13:25:25.715239 kernel: docker0: port 1(veth43987f3) entered disabled state Oct 27 13:25:25.722675 kernel: veth43987f3 (unregistering): left allmulticast mode Oct 27 13:25:25.722754 kernel: veth43987f3 (unregistering): left promiscuous mode Oct 27 13:25:25.710000 audit: ANOM_PROMISCUOUS dev=veth43987f3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:25.726224 kernel: docker0: port 1(veth43987f3) entered disabled state Oct 27 13:25:25.710000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159b280 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.710000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:25.737257 systemd[1]: run-docker-netns-009affafea84.mount: Deactivated successfully. Oct 27 13:25:25.740861 systemd[1]: var-lib-docker-overlay2-ad6f81314e70f5926658abf41a2b54fa735f4cb18fea41644ee80c3edcd579be-merged.mount: Deactivated successfully. Oct 27 13:25:25.754000 audit: BPF prog-id=383 op=UNLOAD Oct 27 13:25:25.754000 audit: BPF prog-id=387 op=UNLOAD Oct 27 13:25:25.823607 systemd[1]: var-lib-docker-overlay2-80322b3728175332ad4daa0f2c41a5f842f9553e9c8c619e2b76f5e49d9476aa\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:25.887062 containerd[1962]: time="2026-10-27T13:25:25.886817237Z" level=info msg="connecting to shim ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514" address="unix:///run/containerd/s/16c177fb1eaa5a156acef518f836a3b5153de3edbc6ed5d1df21f54338e60970" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:25.909373 systemd[1]: Started docker-ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514.scope - libcontainer container ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514. Oct 27 13:25:25.917000 audit: BPF prog-id=388 op=LOAD Oct 27 13:25:25.918000 audit: BPF prog-id=389 op=LOAD Oct 27 13:25:25.918000 audit[8716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=fa148da7f90 a2=98 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.918000 audit: BPF prog-id=389 op=UNLOAD Oct 27 13:25:25.918000 audit[8716]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.918000 audit: BPF prog-id=390 op=LOAD Oct 27 13:25:25.918000 audit[8716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=fa148da8268 a2=98 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.918000 audit: BPF prog-id=391 op=LOAD Oct 27 13:25:25.918000 audit[8716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=fa148da7fa8 a2=98 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.918000 audit: BPF prog-id=391 op=UNLOAD Oct 27 13:25:25.918000 audit[8716]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.919000 audit: BPF prog-id=390 op=UNLOAD Oct 27 13:25:25.919000 audit[8716]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.919000 audit: BPF prog-id=392 op=LOAD Oct 27 13:25:25.919000 audit[8716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=fa148da84b8 a2=98 a3=0 items=0 ppid=8706 pid=8716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66663739333265313264666230323937336365393331653432 Oct 27 13:25:25.933531 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:25.940738 kernel: docker0: port 1(veth6c13fb3) entered blocking state Oct 27 13:25:25.940795 kernel: docker0: port 1(veth6c13fb3) entered disabled state Oct 27 13:25:25.943721 kernel: veth6c13fb3: entered allmulticast mode Oct 27 13:25:25.946530 kernel: veth6c13fb3: entered promiscuous mode Oct 27 13:25:25.931000 audit: ANOM_PROMISCUOUS dev=veth6c13fb3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:25.931000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe9bf0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.931000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:25.949000 audit[8740]: NETFILTER_CFG table=raw:177 family=2 entries=1 op=nft_register_rule pid=8740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:25.949000 audit[8740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd90cffc0 a2=0 a3=0 items=0 ppid=2508 pid=8740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:25.949000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:25.951703 systemd-networkd[1681]: veth6c13fb3: Link UP Oct 27 13:25:25.967784 kernel: eth0: renamed from vethf0cfb32 Oct 27 13:25:25.967857 kernel: docker0: port 1(veth6c13fb3) entered blocking state Oct 27 13:25:25.971040 kernel: docker0: port 1(veth6c13fb3) entered forwarding state Oct 27 13:25:25.971266 systemd-networkd[1681]: veth6c13fb3: Gained carrier Oct 27 13:25:25.971674 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:26.203703 sshd[8660]: Invalid user garcia from 109.160.32.131 port 34378 Oct 27 13:25:26.565991 sshd[8660]: Connection closed by invalid user garcia 109.160.32.131 port 34378 [preauth] Oct 27 13:25:26.565000 audit[8660]: AUDIT1109 pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:26.568584 systemd[1]: sshd@48-19-10.0.0.24:22-109.160.32.131:34378.service: Deactivated successfully. Oct 27 13:25:26.569619 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:26.569701 kernel: audit: type=1109 audit(1793107526.565:1405): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:26.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-19-10.0.0.24:22-109.160.32.131:34378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:26.598879 kernel: audit: type=1131 audit(1793107526.565:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-19-10.0.0.24:22-109.160.32.131:34378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:26.996772 systemd[1]: docker-ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514.scope: Deactivated successfully. Oct 27 13:25:27.008904 dockerd[2508]: time="2026-10-27T13:25:27.008860017Z" level=info msg="ignoring event" container=ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:27.009416 containerd[1962]: time="2026-10-27T13:25:27.008987897Z" level=info msg="shim disconnected" id=ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514 namespace=moby Oct 27 13:25:27.009416 containerd[1962]: time="2026-10-27T13:25:27.009016231Z" level=info msg="cleaning up after shim disconnected" id=ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514 namespace=moby Oct 27 13:25:27.009416 containerd[1962]: time="2026-10-27T13:25:27.009022135Z" level=info msg="cleaning up dead shim" id=ff7932e12dfb02973ce931e423c8b45b5918d008d9b41fb3bc417da5fe0d0514 namespace=moby Oct 27 13:25:27.029331 systemd-networkd[1681]: veth6c13fb3: Lost carrier Oct 27 13:25:27.030111 kernel: docker0: port 1(veth6c13fb3) entered disabled state Oct 27 13:25:27.030185 kernel: vethf0cfb32: renamed from eth0 Oct 27 13:25:27.044000 audit[8773]: NETFILTER_CFG table=raw:178 family=2 entries=1 op=nft_unregister_rule pid=8773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:27.044000 audit[8773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3593690 a2=0 a3=0 items=0 ppid=2508 pid=8773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.073750 kernel: audit: type=1325 audit(1793107527.044:1407): table=raw:178 family=2 entries=1 op=nft_unregister_rule pid=8773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:27.073837 kernel: audit: type=1300 audit(1793107527.044:1407): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe3593690 a2=0 a3=0 items=0 ppid=2508 pid=8773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.044000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:27.085642 kernel: audit: type=1327 audit(1793107527.044:1407): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:27.087783 systemd-networkd[1681]: veth6c13fb3: Link DOWN Oct 27 13:25:27.092140 kernel: docker0: port 1(veth6c13fb3) entered disabled state Oct 27 13:25:27.100030 kernel: veth6c13fb3 (unregistering): left allmulticast mode Oct 27 13:25:27.100090 kernel: veth6c13fb3 (unregistering): left promiscuous mode Oct 27 13:25:27.086000 audit: ANOM_PROMISCUOUS dev=veth6c13fb3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:27.109109 kernel: docker0: port 1(veth6c13fb3) entered disabled state Oct 27 13:25:27.109179 kernel: audit: type=1700 audit(1793107527.086:1408): dev=veth6c13fb3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:27.086000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2540 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.086000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:27.153063 kernel: audit: type=1300 audit(1793107527.086:1408): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2540 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.153135 kernel: audit: type=1327 audit(1793107527.086:1408): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:27.154735 systemd[1]: run-docker-netns-654981e7dcb3.mount: Deactivated successfully. Oct 27 13:25:27.158254 systemd[1]: var-lib-docker-overlay2-80322b3728175332ad4daa0f2c41a5f842f9553e9c8c619e2b76f5e49d9476aa-merged.mount: Deactivated successfully. Oct 27 13:25:27.166000 audit: BPF prog-id=388 op=UNLOAD Oct 27 13:25:27.166000 audit: BPF prog-id=392 op=UNLOAD Oct 27 13:25:27.182456 kernel: audit: type=1334 audit(1793107527.166:1409): prog-id=388 op=UNLOAD Oct 27 13:25:27.182520 kernel: audit: type=1334 audit(1793107527.166:1410): prog-id=392 op=UNLOAD Oct 27 13:25:27.293892 containerd[1962]: time="2026-10-27T13:25:27.293503325Z" level=info msg="connecting to shim 9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb" address="unix:///run/containerd/s/b95a814dcc4787b7633e4b1b53ab84bef66f4a7e2a220618d26b946b545db87f" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:27.312244 systemd[1]: Started docker-9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb.scope - libcontainer container 9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb. Oct 27 13:25:27.320000 audit: BPF prog-id=393 op=LOAD Oct 27 13:25:27.321000 audit: BPF prog-id=394 op=LOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=585bfc231f90 a2=98 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=394 op=UNLOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=395 op=LOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=585bfc232268 a2=98 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=396 op=LOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=585bfc231fa8 a2=98 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=396 op=UNLOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=395 op=UNLOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.321000 audit: BPF prog-id=397 op=LOAD Oct 27 13:25:27.321000 audit[8803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=585bfc2324b8 a2=98 a3=0 items=0 ppid=8790 pid=8803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39653562623139386338373961366231663537663663326536 Oct 27 13:25:27.334484 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:27.342214 kernel: docker0: port 1(veth6fc4ec0) entered blocking state Oct 27 13:25:27.342285 kernel: docker0: port 1(veth6fc4ec0) entered disabled state Oct 27 13:25:27.345386 kernel: veth6fc4ec0: entered allmulticast mode Oct 27 13:25:27.348598 kernel: veth6fc4ec0: entered promiscuous mode Oct 27 13:25:27.333000 audit: ANOM_PROMISCUOUS dev=veth6fc4ec0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:27.333000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1473050 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.333000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:27.350000 audit[8825]: NETFILTER_CFG table=raw:179 family=2 entries=1 op=nft_register_rule pid=8825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:27.350000 audit[8825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff2d87050 a2=0 a3=0 items=0 ppid=2508 pid=8825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:27.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:27.352140 systemd-networkd[1681]: veth6fc4ec0: Link UP Oct 27 13:25:27.367133 kernel: eth0: renamed from veth1634f1c Oct 27 13:25:27.375125 kernel: docker0: port 1(veth6fc4ec0) entered blocking state Oct 27 13:25:27.375192 kernel: docker0: port 1(veth6fc4ec0) entered forwarding state Oct 27 13:25:27.375177 systemd-networkd[1681]: veth6fc4ec0: Gained carrier Oct 27 13:25:27.375411 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:28.402723 systemd[1]: docker-9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb.scope: Deactivated successfully. Oct 27 13:25:28.416682 containerd[1962]: time="2026-10-27T13:25:28.416597435Z" level=info msg="shim disconnected" id=9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb namespace=moby Oct 27 13:25:28.416682 containerd[1962]: time="2026-10-27T13:25:28.416628201Z" level=info msg="cleaning up after shim disconnected" id=9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb namespace=moby Oct 27 13:25:28.416682 containerd[1962]: time="2026-10-27T13:25:28.416634521Z" level=info msg="cleaning up dead shim" id=9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb namespace=moby Oct 27 13:25:28.417988 dockerd[2508]: time="2026-10-27T13:25:28.416824893Z" level=info msg="ignoring event" container=9e5bb198c879a6b1f57f6c2e6e8d06d2e27b804434d1a345eb9bfbaa866d01eb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:28.437871 systemd-networkd[1681]: veth6fc4ec0: Lost carrier Oct 27 13:25:28.438406 kernel: docker0: port 1(veth6fc4ec0) entered disabled state Oct 27 13:25:28.441173 kernel: veth1634f1c: renamed from eth0 Oct 27 13:25:28.453000 audit[8855]: NETFILTER_CFG table=raw:180 family=2 entries=1 op=nft_unregister_rule pid=8855 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:28.453000 audit[8855]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff930f710 a2=0 a3=0 items=0 ppid=2508 pid=8855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:28.457507 systemd-networkd[1681]: veth6fc4ec0: Link DOWN Oct 27 13:25:28.464869 kernel: docker0: port 1(veth6fc4ec0) entered disabled state Oct 27 13:25:28.464929 kernel: veth6fc4ec0 (unregistering): left allmulticast mode Oct 27 13:25:28.468259 kernel: veth6fc4ec0 (unregistering): left promiscuous mode Oct 27 13:25:28.456000 audit: ANOM_PROMISCUOUS dev=veth6fc4ec0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:28.471968 kernel: docker0: port 1(veth6fc4ec0) entered disabled state Oct 27 13:25:28.456000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774fe0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.456000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:28.483215 systemd[1]: run-docker-netns-ccce38e58b75.mount: Deactivated successfully. Oct 27 13:25:28.487577 systemd[1]: var-lib-docker-overlay2-1ce8f2ee8cf7a3ca496e05a792c91385906fb6bf5271bd108db0e8e69d314a24-merged.mount: Deactivated successfully. Oct 27 13:25:28.494000 audit: BPF prog-id=393 op=UNLOAD Oct 27 13:25:28.494000 audit: BPF prog-id=397 op=UNLOAD Oct 27 13:25:28.579003 systemd[1]: var-lib-docker-overlay2-4274d005b9d5f3800966489fb16dba7c19f8f797a927d8e821e02aca23b20335\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:28.642778 containerd[1962]: time="2026-10-27T13:25:28.642679507Z" level=info msg="connecting to shim 7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879" address="unix:///run/containerd/s/16825fa33f302516551a45b95375b65e546de6ebd67d2c65ec6d592c4c1fc0f3" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:28.664269 systemd[1]: Started docker-7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879.scope - libcontainer container 7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879. Oct 27 13:25:28.671000 audit: BPF prog-id=398 op=LOAD Oct 27 13:25:28.672000 audit: BPF prog-id=399 op=LOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=270bc2b45f90 a2=98 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=399 op=UNLOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=400 op=LOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=270bc2b46268 a2=98 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=401 op=LOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=270bc2b45fa8 a2=98 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=401 op=UNLOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=400 op=UNLOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.672000 audit: BPF prog-id=402 op=LOAD Oct 27 13:25:28.672000 audit[8883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=270bc2b464b8 a2=98 a3=0 items=0 ppid=8873 pid=8883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373933613438316365343261643761646636653434653233 Oct 27 13:25:28.686584 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:28.694707 kernel: docker0: port 1(veth1e0be63) entered blocking state Oct 27 13:25:28.694800 kernel: docker0: port 1(veth1e0be63) entered disabled state Oct 27 13:25:28.699366 kernel: veth1e0be63: entered allmulticast mode Oct 27 13:25:28.685000 audit: ANOM_PROMISCUOUS dev=veth1e0be63 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:28.685000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333620 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.685000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:28.704132 kernel: veth1e0be63: entered promiscuous mode Oct 27 13:25:28.704000 audit[8904]: NETFILTER_CFG table=raw:181 family=2 entries=1 op=nft_register_rule pid=8904 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:28.704000 audit[8904]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4ecc630 a2=0 a3=0 items=0 ppid=2508 pid=8904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:28.704000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:28.706362 systemd-networkd[1681]: veth1e0be63: Link UP Oct 27 13:25:28.720135 kernel: eth0: renamed from veth64ac0f6 Oct 27 13:25:28.729113 kernel: docker0: port 1(veth1e0be63) entered blocking state Oct 27 13:25:28.729182 kernel: docker0: port 1(veth1e0be63) entered forwarding state Oct 27 13:25:28.729237 systemd-networkd[1681]: veth1e0be63: Gained carrier Oct 27 13:25:28.729847 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:29.753632 systemd[1]: docker-7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879.scope: Deactivated successfully. Oct 27 13:25:29.766686 dockerd[2508]: time="2026-10-27T13:25:29.766646058Z" level=info msg="ignoring event" container=7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:29.767917 containerd[1962]: time="2026-10-27T13:25:29.767757718Z" level=info msg="shim disconnected" id=7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879 namespace=moby Oct 27 13:25:29.767917 containerd[1962]: time="2026-10-27T13:25:29.767796884Z" level=info msg="cleaning up after shim disconnected" id=7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879 namespace=moby Oct 27 13:25:29.767917 containerd[1962]: time="2026-10-27T13:25:29.767803259Z" level=info msg="cleaning up dead shim" id=7793a481ce42ad7adf6e44e2388dbb09fd7c66593d100b547c6d97cd5c204879 namespace=moby Oct 27 13:25:29.787648 systemd-networkd[1681]: veth1e0be63: Lost carrier Oct 27 13:25:29.788120 kernel: docker0: port 1(veth1e0be63) entered disabled state Oct 27 13:25:29.791116 kernel: veth64ac0f6: renamed from eth0 Oct 27 13:25:29.808000 audit[8935]: NETFILTER_CFG table=raw:182 family=2 entries=1 op=nft_unregister_rule pid=8935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:29.808000 audit[8935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc0df9ef0 a2=0 a3=0 items=0 ppid=2508 pid=8935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:29.808000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:29.814503 systemd-networkd[1681]: veth1e0be63: Link DOWN Oct 27 13:25:29.818154 kernel: docker0: port 1(veth1e0be63) entered disabled state Oct 27 13:25:29.825786 kernel: veth1e0be63 (unregistering): left allmulticast mode Oct 27 13:25:29.825860 kernel: veth1e0be63 (unregistering): left promiscuous mode Oct 27 13:25:29.814000 audit: ANOM_PROMISCUOUS dev=veth1e0be63 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:29.829338 kernel: docker0: port 1(veth1e0be63) entered disabled state Oct 27 13:25:29.814000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c10527a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:29.814000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:29.840861 systemd[1]: run-docker-netns-6e38b4deb0a4.mount: Deactivated successfully. Oct 27 13:25:29.843136 systemd[1]: var-lib-docker-overlay2-4274d005b9d5f3800966489fb16dba7c19f8f797a927d8e821e02aca23b20335-merged.mount: Deactivated successfully. Oct 27 13:25:29.852000 audit: BPF prog-id=398 op=UNLOAD Oct 27 13:25:29.852000 audit: BPF prog-id=402 op=UNLOAD Oct 27 13:25:29.985834 containerd[1962]: time="2026-10-27T13:25:29.985784343Z" level=info msg="connecting to shim c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac" address="unix:///run/containerd/s/a539fc59b19f924a7e1441e889bbb5d263c8f4b0bf9ea1039f49c5ac27f228a5" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:30.004256 systemd[1]: Started docker-c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac.scope - libcontainer container c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac. Oct 27 13:25:30.014000 audit: BPF prog-id=403 op=LOAD Oct 27 13:25:30.014000 audit: BPF prog-id=404 op=LOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fc31ab1f90 a2=98 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=404 op=UNLOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=405 op=LOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fc31ab2268 a2=98 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=406 op=LOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7fc31ab1fa8 a2=98 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=406 op=UNLOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=405 op=UNLOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.014000 audit: BPF prog-id=407 op=LOAD Oct 27 13:25:30.014000 audit[8963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fc31ab24b8 a2=98 a3=0 items=0 ppid=8952 pid=8963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383333356435346434626636336535666466306263393461 Oct 27 13:25:30.033546 kernel: docker0: port 1(veth21b2965) entered blocking state Oct 27 13:25:30.033631 kernel: docker0: port 1(veth21b2965) entered disabled state Oct 27 13:25:30.036295 kernel: veth21b2965: entered allmulticast mode Oct 27 13:25:30.038997 kernel: veth21b2965: entered promiscuous mode Oct 27 13:25:30.026000 audit: ANOM_PROMISCUOUS dev=veth21b2965 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:30.026000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64660 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.026000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:30.039678 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:30.042000 audit[8984]: NETFILTER_CFG table=raw:183 family=2 entries=1 op=nft_register_rule pid=8984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:30.042000 audit[8984]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff6218c80 a2=0 a3=0 items=0 ppid=2508 pid=8984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:30.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:30.042928 systemd-networkd[1681]: veth21b2965: Link UP Oct 27 13:25:30.062109 kernel: eth0: renamed from veth9cb306b Oct 27 13:25:30.062192 kernel: docker0: port 1(veth21b2965) entered blocking state Oct 27 13:25:30.062231 kernel: docker0: port 1(veth21b2965) entered forwarding state Oct 27 13:25:30.064157 systemd-networkd[1681]: veth21b2965: Gained carrier Oct 27 13:25:30.064947 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:31.071377 systemd[1]: Started sshd@49-4127-10.0.0.24:22-109.160.32.131:45912.service - OpenSSH per-connection server daemon (109.160.32.131:45912). Oct 27 13:25:31.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4127-10.0.0.24:22-109.160.32.131:45912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:31.089914 systemd[1]: docker-c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac.scope: Deactivated successfully. Oct 27 13:25:31.103372 dockerd[2508]: time="2026-10-27T13:25:31.103334483Z" level=info msg="ignoring event" container=c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:31.104299 containerd[1962]: time="2026-10-27T13:25:31.104175216Z" level=info msg="shim disconnected" id=c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac namespace=moby Oct 27 13:25:31.104299 containerd[1962]: time="2026-10-27T13:25:31.104202334Z" level=info msg="cleaning up after shim disconnected" id=c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac namespace=moby Oct 27 13:25:31.104299 containerd[1962]: time="2026-10-27T13:25:31.104209886Z" level=info msg="cleaning up dead shim" id=c8335d54d4bf63e5fdf0bc94a2396b9280b5c2334975a3d1683029d823908cac namespace=moby Oct 27 13:25:31.125504 systemd-networkd[1681]: veth21b2965: Lost carrier Oct 27 13:25:31.126383 kernel: docker0: port 1(veth21b2965) entered disabled state Oct 27 13:25:31.130126 kernel: veth9cb306b: renamed from eth0 Oct 27 13:25:31.142000 audit[9018]: NETFILTER_CFG table=raw:184 family=2 entries=1 op=nft_unregister_rule pid=9018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:31.142000 audit[9018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff023abd0 a2=0 a3=0 items=0 ppid=2508 pid=9018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.142000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:31.148503 systemd-networkd[1681]: veth21b2965: Link DOWN Oct 27 13:25:31.152118 kernel: docker0: port 1(veth21b2965) entered disabled state Oct 27 13:25:31.160025 kernel: veth21b2965 (unregistering): left allmulticast mode Oct 27 13:25:31.160120 kernel: veth21b2965 (unregistering): left promiscuous mode Oct 27 13:25:31.148000 audit: ANOM_PROMISCUOUS dev=veth21b2965 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:31.164804 kernel: docker0: port 1(veth21b2965) entered disabled state Oct 27 13:25:31.148000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1052640 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.148000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:31.172559 systemd[1]: run-docker-netns-0f35b4a06905.mount: Deactivated successfully. Oct 27 13:25:31.177900 systemd[1]: var-lib-docker-overlay2-9377ed56c6181490fbd4cc697093169067acd15e45cbb14df704a7409a5dc5ab-merged.mount: Deactivated successfully. Oct 27 13:25:31.188000 audit: BPF prog-id=403 op=UNLOAD Oct 27 13:25:31.188000 audit: BPF prog-id=407 op=UNLOAD Oct 27 13:25:31.343475 containerd[1962]: time="2026-10-27T13:25:31.343338037Z" level=info msg="connecting to shim f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a" address="unix:///run/containerd/s/3236731f1e4615131bb3984da1f6af232a990b0ebd635f38d819d87f07e43746" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:31.364374 systemd[1]: Started docker-f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a.scope - libcontainer container f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a. Oct 27 13:25:31.372000 audit: BPF prog-id=408 op=LOAD Oct 27 13:25:31.372000 audit: BPF prog-id=409 op=LOAD Oct 27 13:25:31.372000 audit[9046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e4abea3df90 a2=98 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.372000 audit: BPF prog-id=409 op=UNLOAD Oct 27 13:25:31.372000 audit[9046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.372000 audit: BPF prog-id=410 op=LOAD Oct 27 13:25:31.372000 audit[9046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e4abea3e268 a2=98 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.373000 audit: BPF prog-id=411 op=LOAD Oct 27 13:25:31.373000 audit[9046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6e4abea3dfa8 a2=98 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.373000 audit: BPF prog-id=411 op=UNLOAD Oct 27 13:25:31.373000 audit[9046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.373000 audit: BPF prog-id=410 op=UNLOAD Oct 27 13:25:31.373000 audit[9046]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.373000 audit: BPF prog-id=412 op=LOAD Oct 27 13:25:31.373000 audit[9046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6e4abea3e4b8 a2=98 a3=0 items=0 ppid=9034 pid=9046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396135353934323235656135653961396462623534613061 Oct 27 13:25:31.387805 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:31.396111 kernel: docker0: port 1(vethb7d47e8) entered blocking state Oct 27 13:25:31.396189 kernel: docker0: port 1(vethb7d47e8) entered disabled state Oct 27 13:25:31.400009 kernel: vethb7d47e8: entered allmulticast mode Oct 27 13:25:31.402113 kernel: vethb7d47e8: entered promiscuous mode Oct 27 13:25:31.386000 audit: ANOM_PROMISCUOUS dev=vethb7d47e8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:31.386000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7890 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.386000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:31.404000 audit[9070]: NETFILTER_CFG table=raw:185 family=2 entries=1 op=nft_register_rule pid=9070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:31.404000 audit[9070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff40d1180 a2=0 a3=0 items=0 ppid=2508 pid=9070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:31.404000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:31.405965 systemd-networkd[1681]: vethb7d47e8: Link UP Oct 27 13:25:31.420118 kernel: eth0: renamed from vethd97b41f Oct 27 13:25:31.427297 kernel: docker0: port 1(vethb7d47e8) entered blocking state Oct 27 13:25:31.427380 kernel: docker0: port 1(vethb7d47e8) entered forwarding state Oct 27 13:25:31.427590 systemd-networkd[1681]: vethb7d47e8: Gained carrier Oct 27 13:25:31.428282 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:31.954412 sshd[8994]: Invalid user airflow from 109.160.32.131 port 45912 Oct 27 13:25:32.402269 sshd[8994]: Connection closed by invalid user airflow 109.160.32.131 port 45912 [preauth] Oct 27 13:25:32.401000 audit[8994]: AUDIT1109 pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:32.407426 systemd[1]: sshd@49-4127-10.0.0.24:22-109.160.32.131:45912.service: Deactivated successfully. Oct 27 13:25:32.420507 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:32.420584 kernel: audit: type=1109 audit(1793107532.401:1464): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:32.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4127-10.0.0.24:22-109.160.32.131:45912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:32.434061 kernel: audit: type=1131 audit(1793107532.405:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4127-10.0.0.24:22-109.160.32.131:45912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:32.451801 systemd[1]: docker-f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a.scope: Deactivated successfully. Oct 27 13:25:32.463552 dockerd[2508]: time="2026-10-27T13:25:32.463518064Z" level=info msg="ignoring event" container=f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:32.463942 containerd[1962]: time="2026-10-27T13:25:32.463600659Z" level=info msg="shim disconnected" id=f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a namespace=moby Oct 27 13:25:32.463942 containerd[1962]: time="2026-10-27T13:25:32.463642376Z" level=info msg="cleaning up after shim disconnected" id=f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a namespace=moby Oct 27 13:25:32.463942 containerd[1962]: time="2026-10-27T13:25:32.463649032Z" level=info msg="cleaning up dead shim" id=f9a5594225ea5e9a9dbb54a0a5dbad045c1f1927cc65d07991be3b7252a8928a namespace=moby Oct 27 13:25:32.483609 systemd-networkd[1681]: vethb7d47e8: Lost carrier Oct 27 13:25:32.484119 kernel: docker0: port 1(vethb7d47e8) entered disabled state Oct 27 13:25:32.484152 kernel: vethd97b41f: renamed from eth0 Oct 27 13:25:32.503000 audit[9103]: NETFILTER_CFG table=raw:186 family=2 entries=1 op=nft_unregister_rule pid=9103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:32.503000 audit[9103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc2179180 a2=0 a3=0 items=0 ppid=2508 pid=9103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.530846 kernel: audit: type=1325 audit(1793107532.503:1466): table=raw:186 family=2 entries=1 op=nft_unregister_rule pid=9103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:32.530915 kernel: audit: type=1300 audit(1793107532.503:1466): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc2179180 a2=0 a3=0 items=0 ppid=2508 pid=9103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:32.542335 kernel: audit: type=1327 audit(1793107532.503:1466): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:32.544699 systemd-networkd[1681]: vethb7d47e8: Link DOWN Oct 27 13:25:32.549133 kernel: docker0: port 1(vethb7d47e8) entered disabled state Oct 27 13:25:32.556661 kernel: vethb7d47e8 (unregistering): left allmulticast mode Oct 27 13:25:32.556724 kernel: vethb7d47e8 (unregistering): left promiscuous mode Oct 27 13:25:32.543000 audit: ANOM_PROMISCUOUS dev=vethb7d47e8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:32.564116 kernel: audit: type=1700 audit(1793107532.543:1467): dev=vethb7d47e8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:32.564179 kernel: docker0: port 1(vethb7d47e8) entered disabled state Oct 27 13:25:32.543000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a4080 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.543000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:32.608425 kernel: audit: type=1300 audit(1793107532.543:1467): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a4080 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.608510 kernel: audit: type=1327 audit(1793107532.543:1467): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:32.609465 systemd[1]: run-docker-netns-8fc34614b449.mount: Deactivated successfully. Oct 27 13:25:32.614278 systemd[1]: var-lib-docker-overlay2-e08c442066c908a0edd5ca32b5060a7438160c4c693119ea8cd8eeb9ad4171df-merged.mount: Deactivated successfully. Oct 27 13:25:32.619000 audit: BPF prog-id=408 op=UNLOAD Oct 27 13:25:32.619000 audit: BPF prog-id=412 op=UNLOAD Oct 27 13:25:32.632174 kernel: audit: type=1334 audit(1793107532.619:1468): prog-id=408 op=UNLOAD Oct 27 13:25:32.632242 kernel: audit: type=1334 audit(1793107532.619:1469): prog-id=412 op=UNLOAD Oct 27 13:25:32.682094 systemd[1]: var-lib-docker-overlay2-bc9f363aaf11cfd878fbf58d1d428bf6a1ce63d9d49a3086f56bf6f7940fd7bf\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:32.751211 containerd[1962]: time="2026-10-27T13:25:32.751168398Z" level=info msg="connecting to shim 439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842" address="unix:///run/containerd/s/ede1a6955428b8869aa1aec35127e06700a93e6b5db32c5ae66f095166c84fb4" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:32.775260 systemd[1]: Started docker-439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842.scope - libcontainer container 439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842. Oct 27 13:25:32.783000 audit: BPF prog-id=413 op=LOAD Oct 27 13:25:32.783000 audit: BPF prog-id=414 op=LOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=62783565ff90 a2=98 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=414 op=UNLOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=415 op=LOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=627835660268 a2=98 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=416 op=LOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=62783565ffa8 a2=98 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=416 op=UNLOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=415 op=UNLOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.783000 audit: BPF prog-id=417 op=LOAD Oct 27 13:25:32.783000 audit[9131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6278356604b8 a2=98 a3=0 items=0 ppid=9120 pid=9131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333962303738383664666230323361383634316264383730 Oct 27 13:25:32.796706 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:32.803815 kernel: docker0: port 1(vethb98afc9) entered blocking state Oct 27 13:25:32.803896 kernel: docker0: port 1(vethb98afc9) entered disabled state Oct 27 13:25:32.806822 kernel: vethb98afc9: entered allmulticast mode Oct 27 13:25:32.795000 audit: ANOM_PROMISCUOUS dev=vethb98afc9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:32.795000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f1a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.795000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:32.811131 kernel: vethb98afc9: entered promiscuous mode Oct 27 13:25:32.810000 audit[9155]: NETFILTER_CFG table=raw:187 family=2 entries=1 op=nft_register_rule pid=9155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:32.810000 audit[9155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffdbd60b0 a2=0 a3=0 items=0 ppid=2508 pid=9155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:32.810000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:32.812539 systemd-networkd[1681]: vethb98afc9: Link UP Oct 27 13:25:32.828839 kernel: eth0: renamed from veth6816806 Oct 27 13:25:32.828908 kernel: docker0: port 1(vethb98afc9) entered blocking state Oct 27 13:25:32.832287 kernel: docker0: port 1(vethb98afc9) entered forwarding state Oct 27 13:25:32.832780 systemd-networkd[1681]: vethb98afc9: Gained carrier Oct 27 13:25:32.833270 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:33.856433 systemd[1]: docker-439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842.scope: Deactivated successfully. Oct 27 13:25:33.871124 dockerd[2508]: time="2026-10-27T13:25:33.871058419Z" level=info msg="ignoring event" container=439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:33.871450 containerd[1962]: time="2026-10-27T13:25:33.871013062Z" level=info msg="shim disconnected" id=439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842 namespace=moby Oct 27 13:25:33.871450 containerd[1962]: time="2026-10-27T13:25:33.871186827Z" level=info msg="cleaning up after shim disconnected" id=439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842 namespace=moby Oct 27 13:25:33.871450 containerd[1962]: time="2026-10-27T13:25:33.871195923Z" level=info msg="cleaning up dead shim" id=439b07886dfb023a8641bd8705b1c78b759f0fc466b5475d1b1388b21cb6e842 namespace=moby Oct 27 13:25:33.891763 systemd-networkd[1681]: vethb98afc9: Lost carrier Oct 27 13:25:33.892123 kernel: docker0: port 1(vethb98afc9) entered disabled state Oct 27 13:25:33.895125 kernel: veth6816806: renamed from eth0 Oct 27 13:25:33.907000 audit[9185]: NETFILTER_CFG table=raw:188 family=2 entries=1 op=nft_unregister_rule pid=9185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:33.907000 audit[9185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffa2d7520 a2=0 a3=0 items=0 ppid=2508 pid=9185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:33.907000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:33.916138 systemd-networkd[1681]: vethb98afc9: Link DOWN Oct 27 13:25:33.922910 kernel: docker0: port 1(vethb98afc9) entered disabled state Oct 27 13:25:33.922978 kernel: vethb98afc9 (unregistering): left allmulticast mode Oct 27 13:25:33.926825 kernel: vethb98afc9 (unregistering): left promiscuous mode Oct 27 13:25:33.913000 audit: ANOM_PROMISCUOUS dev=vethb98afc9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:33.930260 kernel: docker0: port 1(vethb98afc9) entered disabled state Oct 27 13:25:33.913000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce740 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:33.913000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:33.941980 systemd[1]: run-docker-netns-89ab6d05e05d.mount: Deactivated successfully. Oct 27 13:25:33.946305 systemd[1]: var-lib-docker-overlay2-bc9f363aaf11cfd878fbf58d1d428bf6a1ce63d9d49a3086f56bf6f7940fd7bf-merged.mount: Deactivated successfully. Oct 27 13:25:33.951000 audit: BPF prog-id=413 op=UNLOAD Oct 27 13:25:33.951000 audit: BPF prog-id=417 op=UNLOAD Oct 27 13:25:34.082192 containerd[1962]: time="2026-10-27T13:25:34.082118452Z" level=info msg="connecting to shim 0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067" address="unix:///run/containerd/s/3ec7ddf433a8f8526d07eea1f8ee245c5b133f701bfb3dc92c165332f930f01f" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:34.102260 systemd[1]: Started docker-0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067.scope - libcontainer container 0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067. Oct 27 13:25:34.110000 audit: BPF prog-id=418 op=LOAD Oct 27 13:25:34.110000 audit: BPF prog-id=419 op=LOAD Oct 27 13:25:34.110000 audit[9214]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4fc57d8cff90 a2=98 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.110000 audit: BPF prog-id=419 op=UNLOAD Oct 27 13:25:34.110000 audit[9214]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.110000 audit: BPF prog-id=420 op=LOAD Oct 27 13:25:34.110000 audit[9214]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4fc57d8d0268 a2=98 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.111000 audit: BPF prog-id=421 op=LOAD Oct 27 13:25:34.111000 audit[9214]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4fc57d8cffa8 a2=98 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.111000 audit: BPF prog-id=421 op=UNLOAD Oct 27 13:25:34.111000 audit[9214]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.111000 audit: BPF prog-id=420 op=UNLOAD Oct 27 13:25:34.111000 audit[9214]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.111000 audit: BPF prog-id=422 op=LOAD Oct 27 13:25:34.111000 audit[9214]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4fc57d8d04b8 a2=98 a3=0 items=0 ppid=9203 pid=9214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30343432623534306135313464633363336236653436326165 Oct 27 13:25:34.124959 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:34.132575 kernel: docker0: port 1(vethd15d4cd) entered blocking state Oct 27 13:25:34.132641 kernel: docker0: port 1(vethd15d4cd) entered disabled state Oct 27 13:25:34.135423 kernel: vethd15d4cd: entered allmulticast mode Oct 27 13:25:34.123000 audit: ANOM_PROMISCUOUS dev=vethd15d4cd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:34.139113 kernel: vethd15d4cd: entered promiscuous mode Oct 27 13:25:34.123000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047b90 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:34.139000 audit[9236]: NETFILTER_CFG table=raw:189 family=2 entries=1 op=nft_register_rule pid=9236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:34.139000 audit[9236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff8e37860 a2=0 a3=0 items=0 ppid=2508 pid=9236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:34.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:34.141413 systemd-networkd[1681]: vethd15d4cd: Link UP Oct 27 13:25:34.156117 kernel: eth0: renamed from vethec571e5 Oct 27 13:25:34.156202 kernel: docker0: port 1(vethd15d4cd) entered blocking state Oct 27 13:25:34.163032 kernel: docker0: port 1(vethd15d4cd) entered forwarding state Oct 27 13:25:34.163375 systemd-networkd[1681]: vethd15d4cd: Gained carrier Oct 27 13:25:34.164065 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:35.188512 systemd[1]: docker-0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067.scope: Deactivated successfully. Oct 27 13:25:35.202667 containerd[1962]: time="2026-10-27T13:25:35.202579847Z" level=info msg="shim disconnected" id=0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067 namespace=moby Oct 27 13:25:35.202667 containerd[1962]: time="2026-10-27T13:25:35.202607005Z" level=info msg="cleaning up after shim disconnected" id=0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067 namespace=moby Oct 27 13:25:35.202667 containerd[1962]: time="2026-10-27T13:25:35.202612053Z" level=info msg="cleaning up dead shim" id=0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067 namespace=moby Oct 27 13:25:35.203047 dockerd[2508]: time="2026-10-27T13:25:35.202613101Z" level=info msg="ignoring event" container=0442b540a514dc3c3b6e462aec73e00c05a9b2131ddf268257c191696fe5b067 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:35.223215 kernel: docker0: port 1(vethd15d4cd) entered disabled state Oct 27 13:25:35.223133 systemd-networkd[1681]: vethd15d4cd: Lost carrier Oct 27 13:25:35.227123 kernel: vethec571e5: renamed from eth0 Oct 27 13:25:35.241000 audit[9268]: NETFILTER_CFG table=raw:190 family=2 entries=1 op=nft_unregister_rule pid=9268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:35.241000 audit[9268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd811ae30 a2=0 a3=0 items=0 ppid=2508 pid=9268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.241000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:35.248609 systemd-networkd[1681]: vethd15d4cd: Link DOWN Oct 27 13:25:35.257518 kernel: docker0: port 1(vethd15d4cd) entered disabled state Oct 27 13:25:35.257582 kernel: vethd15d4cd (unregistering): left allmulticast mode Oct 27 13:25:35.262004 kernel: vethd15d4cd (unregistering): left promiscuous mode Oct 27 13:25:35.247000 audit: ANOM_PROMISCUOUS dev=vethd15d4cd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:35.266264 kernel: docker0: port 1(vethd15d4cd) entered disabled state Oct 27 13:25:35.247000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159b800 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.247000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:35.277410 systemd[1]: run-docker-netns-81b6e5c9e3e6.mount: Deactivated successfully. Oct 27 13:25:35.280976 systemd[1]: var-lib-docker-overlay2-9aa905737220c9e3925bccc4ebaa7137d57f3a38588ae6621985b386f8d3ed7b-merged.mount: Deactivated successfully. Oct 27 13:25:35.288000 audit: BPF prog-id=418 op=UNLOAD Oct 27 13:25:35.288000 audit: BPF prog-id=422 op=UNLOAD Oct 27 13:25:35.367958 systemd[1]: var-lib-docker-overlay2-7ebf6e9dc69dfe56c4fa3a39ce7ccfcc6682cb86a27fbc483ddfe3fb4710fe74\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:35.429942 containerd[1962]: time="2026-10-27T13:25:35.429883213Z" level=info msg="connecting to shim f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82" address="unix:///run/containerd/s/369aea294b292ec158e100db59c3924bf2728d0ca6edaa2cadf66e4dd199be52" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:35.450259 systemd[1]: Started docker-f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82.scope - libcontainer container f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82. Oct 27 13:25:35.458000 audit: BPF prog-id=423 op=LOAD Oct 27 13:25:35.458000 audit: BPF prog-id=424 op=LOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1af35f96bf90 a2=98 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=424 op=UNLOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=425 op=LOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1af35f96c268 a2=98 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=426 op=LOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1af35f96bfa8 a2=98 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=426 op=UNLOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=425 op=UNLOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.458000 audit: BPF prog-id=427 op=LOAD Oct 27 13:25:35.458000 audit[9298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1af35f96c4b8 a2=98 a3=0 items=0 ppid=9286 pid=9298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66313635363532313635313566623033333562316433306266 Oct 27 13:25:35.472591 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:35.479729 kernel: docker0: port 1(veth10dbe16) entered blocking state Oct 27 13:25:35.479785 kernel: docker0: port 1(veth10dbe16) entered disabled state Oct 27 13:25:35.482589 kernel: veth10dbe16: entered allmulticast mode Oct 27 13:25:35.485339 kernel: veth10dbe16: entered promiscuous mode Oct 27 13:25:35.471000 audit: ANOM_PROMISCUOUS dev=veth10dbe16 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:35.471000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe9c50 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.471000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:35.487000 audit[9320]: NETFILTER_CFG table=raw:191 family=2 entries=1 op=nft_register_rule pid=9320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:35.487000 audit[9320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe92bd010 a2=0 a3=0 items=0 ppid=2508 pid=9320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:35.487000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:35.489009 systemd-networkd[1681]: veth10dbe16: Link UP Oct 27 13:25:35.502130 kernel: eth0: renamed from veth661a3cb Oct 27 13:25:35.502199 kernel: docker0: port 1(veth10dbe16) entered blocking state Oct 27 13:25:35.509375 kernel: docker0: port 1(veth10dbe16) entered forwarding state Oct 27 13:25:35.509637 systemd-networkd[1681]: veth10dbe16: Gained carrier Oct 27 13:25:35.510442 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:36.536855 systemd[1]: docker-f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82.scope: Deactivated successfully. Oct 27 13:25:36.550216 dockerd[2508]: time="2026-10-27T13:25:36.550152746Z" level=info msg="ignoring event" container=f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:36.550529 containerd[1962]: time="2026-10-27T13:25:36.550246189Z" level=info msg="shim disconnected" id=f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82 namespace=moby Oct 27 13:25:36.550529 containerd[1962]: time="2026-10-27T13:25:36.550271339Z" level=info msg="cleaning up after shim disconnected" id=f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82 namespace=moby Oct 27 13:25:36.550529 containerd[1962]: time="2026-10-27T13:25:36.550278851Z" level=info msg="cleaning up dead shim" id=f16565216515fb0335b1d30bfa9235bf46f63188b386d649276f4f245bea3a82 namespace=moby Oct 27 13:25:36.569541 systemd-networkd[1681]: veth10dbe16: Lost carrier Oct 27 13:25:36.570415 kernel: docker0: port 1(veth10dbe16) entered disabled state Oct 27 13:25:36.570442 kernel: veth661a3cb: renamed from eth0 Oct 27 13:25:36.588000 audit[9350]: NETFILTER_CFG table=raw:192 family=2 entries=1 op=nft_unregister_rule pid=9350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:36.588000 audit[9350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe5014f00 a2=0 a3=0 items=0 ppid=2508 pid=9350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.588000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:36.596498 systemd-networkd[1681]: veth10dbe16: Link DOWN Oct 27 13:25:36.603969 kernel: docker0: port 1(veth10dbe16) entered disabled state Oct 27 13:25:36.604035 kernel: veth10dbe16 (unregistering): left allmulticast mode Oct 27 13:25:36.607605 kernel: veth10dbe16 (unregistering): left promiscuous mode Oct 27 13:25:36.595000 audit: ANOM_PROMISCUOUS dev=veth10dbe16 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:36.610858 kernel: docker0: port 1(veth10dbe16) entered disabled state Oct 27 13:25:36.595000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2da0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.595000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:36.622105 systemd[1]: run-docker-netns-0df229749525.mount: Deactivated successfully. Oct 27 13:25:36.625883 systemd[1]: var-lib-docker-overlay2-7ebf6e9dc69dfe56c4fa3a39ce7ccfcc6682cb86a27fbc483ddfe3fb4710fe74-merged.mount: Deactivated successfully. Oct 27 13:25:36.632000 audit: BPF prog-id=423 op=UNLOAD Oct 27 13:25:36.632000 audit: BPF prog-id=427 op=UNLOAD Oct 27 13:25:36.725215 systemd[1]: var-lib-docker-overlay2-9117e00000ec666e4415d73a60f9583ff834026523ce87bd20e802cd948cef00\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:36.788401 containerd[1962]: time="2026-10-27T13:25:36.788283888Z" level=info msg="connecting to shim 5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4" address="unix:///run/containerd/s/1bf78f46f4ac8092e4017f248ae31c66eecac94b52110a357d2a6d4b53da2357" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:36.811287 systemd[1]: Started docker-5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4.scope - libcontainer container 5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4. Oct 27 13:25:36.819000 audit: BPF prog-id=428 op=LOAD Oct 27 13:25:36.819000 audit: BPF prog-id=429 op=LOAD Oct 27 13:25:36.819000 audit[9378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=199c8ad9bf90 a2=98 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.819000 audit: BPF prog-id=429 op=UNLOAD Oct 27 13:25:36.819000 audit[9378]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.820000 audit: BPF prog-id=430 op=LOAD Oct 27 13:25:36.820000 audit[9378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=199c8ad9c268 a2=98 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.820000 audit: BPF prog-id=431 op=LOAD Oct 27 13:25:36.820000 audit[9378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=199c8ad9bfa8 a2=98 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.820000 audit: BPF prog-id=431 op=UNLOAD Oct 27 13:25:36.820000 audit[9378]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.820000 audit: BPF prog-id=430 op=UNLOAD Oct 27 13:25:36.820000 audit[9378]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.820000 audit: BPF prog-id=432 op=LOAD Oct 27 13:25:36.820000 audit[9378]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=199c8ad9c4b8 a2=98 a3=0 items=0 ppid=9367 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613462656537323766616661393837303335363361656638 Oct 27 13:25:36.833850 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:36.839946 kernel: docker0: port 1(vethc7cd3d7) entered blocking state Oct 27 13:25:36.840015 kernel: docker0: port 1(vethc7cd3d7) entered disabled state Oct 27 13:25:36.842632 kernel: vethc7cd3d7: entered allmulticast mode Oct 27 13:25:36.845255 kernel: vethc7cd3d7: entered promiscuous mode Oct 27 13:25:36.832000 audit: ANOM_PROMISCUOUS dev=vethc7cd3d7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:36.832000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c23328a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:36.846000 audit[9398]: NETFILTER_CFG table=raw:193 family=2 entries=1 op=nft_register_rule pid=9398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:36.846000 audit[9398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc4a238e0 a2=0 a3=0 items=0 ppid=2508 pid=9398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:36.846000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:36.847774 systemd-networkd[1681]: vethc7cd3d7: Link UP Oct 27 13:25:36.866121 kernel: eth0: renamed from veth1be94b7 Oct 27 13:25:36.866233 kernel: docker0: port 1(vethc7cd3d7) entered blocking state Oct 27 13:25:36.866256 kernel: docker0: port 1(vethc7cd3d7) entered forwarding state Oct 27 13:25:36.867981 systemd-networkd[1681]: vethc7cd3d7: Gained carrier Oct 27 13:25:36.868228 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:37.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-20-10.0.0.24:22-109.160.32.131:45964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:37.178192 systemd[1]: Started sshd@50-20-10.0.0.24:22-109.160.32.131:45964.service - OpenSSH per-connection server daemon (109.160.32.131:45964). Oct 27 13:25:37.896196 systemd[1]: docker-5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4.scope: Deactivated successfully. Oct 27 13:25:37.907920 dockerd[2508]: time="2026-10-27T13:25:37.907879164Z" level=info msg="ignoring event" container=5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:37.908567 containerd[1962]: time="2026-10-27T13:25:37.908344897Z" level=info msg="shim disconnected" id=5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4 namespace=moby Oct 27 13:25:37.908567 containerd[1962]: time="2026-10-27T13:25:37.908377767Z" level=info msg="cleaning up after shim disconnected" id=5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4 namespace=moby Oct 27 13:25:37.908567 containerd[1962]: time="2026-10-27T13:25:37.908386055Z" level=info msg="cleaning up dead shim" id=5a4bee727fafa98703563aef8752f26ba84451205dc4abe5b3e949e5404ab5d4 namespace=moby Oct 27 13:25:37.930047 systemd-networkd[1681]: vethc7cd3d7: Lost carrier Oct 27 13:25:37.930347 kernel: docker0: port 1(vethc7cd3d7) entered disabled state Oct 27 13:25:37.941121 kernel: veth1be94b7: renamed from eth0 Oct 27 13:25:37.967000 audit[9434]: NETFILTER_CFG table=raw:194 family=2 entries=1 op=nft_unregister_rule pid=9434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:37.980868 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:37.980928 kernel: audit: type=1325 audit(1793107537.967:1523): table=raw:194 family=2 entries=1 op=nft_unregister_rule pid=9434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:37.967000 audit[9434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd338e7b0 a2=0 a3=0 items=0 ppid=2508 pid=9434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:37.998780 kernel: audit: type=1300 audit(1793107537.967:1523): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd338e7b0 a2=0 a3=0 items=0 ppid=2508 pid=9434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:37.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:38.010905 kernel: audit: type=1327 audit(1793107537.967:1523): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:38.014110 kernel: docker0: port 1(vethc7cd3d7) entered disabled state Oct 27 13:25:38.015309 systemd-networkd[1681]: vethc7cd3d7: Link DOWN Oct 27 13:25:38.016498 sshd[9408]: Invalid user openvpn from 109.160.32.131 port 45964 Oct 27 13:25:38.019336 kernel: vethc7cd3d7 (unregistering): left allmulticast mode Oct 27 13:25:38.023093 kernel: vethc7cd3d7 (unregistering): left promiscuous mode Oct 27 13:25:37.998000 audit: ANOM_PROMISCUOUS dev=vethc7cd3d7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:38.027436 kernel: docker0: port 1(vethc7cd3d7) entered disabled state Oct 27 13:25:38.027465 kernel: audit: type=1700 audit(1793107537.998:1524): dev=vethc7cd3d7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:37.998000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:37.998000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:38.073761 kernel: audit: type=1300 audit(1793107537.998:1524): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a2980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.073851 kernel: audit: type=1327 audit(1793107537.998:1524): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:38.075146 systemd[1]: run-docker-netns-8696284f4796.mount: Deactivated successfully. Oct 27 13:25:38.079948 systemd[1]: var-lib-docker-overlay2-9117e00000ec666e4415d73a60f9583ff834026523ce87bd20e802cd948cef00-merged.mount: Deactivated successfully. Oct 27 13:25:38.090000 audit: BPF prog-id=428 op=UNLOAD Oct 27 13:25:38.090000 audit: BPF prog-id=432 op=UNLOAD Oct 27 13:25:38.119265 kernel: audit: type=1334 audit(1793107538.090:1525): prog-id=428 op=UNLOAD Oct 27 13:25:38.119330 kernel: audit: type=1334 audit(1793107538.090:1526): prog-id=432 op=UNLOAD Oct 27 13:25:38.214418 sshd[9408]: Connection closed by invalid user openvpn 109.160.32.131 port 45964 [preauth] Oct 27 13:25:38.214000 audit[9408]: AUDIT1109 pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:38.218120 systemd[1]: sshd@50-20-10.0.0.24:22-109.160.32.131:45964.service: Deactivated successfully. Oct 27 13:25:38.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-20-10.0.0.24:22-109.160.32.131:45964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:38.244867 kernel: audit: type=1109 audit(1793107538.214:1527): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:38.244964 kernel: audit: type=1131 audit(1793107538.214:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-20-10.0.0.24:22-109.160.32.131:45964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:38.269216 containerd[1962]: time="2026-10-27T13:25:38.269174429Z" level=info msg="connecting to shim 616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c" address="unix:///run/containerd/s/4a34fd9c56374c5c6c1ae487f5016112237be144f44d7d5543da042b6db592c5" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:38.292267 systemd[1]: Started docker-616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c.scope - libcontainer container 616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c. Oct 27 13:25:38.300000 audit: BPF prog-id=433 op=LOAD Oct 27 13:25:38.301000 audit: BPF prog-id=434 op=LOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=68bd55f8df90 a2=98 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=434 op=UNLOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=435 op=LOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=68bd55f8e268 a2=98 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=436 op=LOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=68bd55f8dfa8 a2=98 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=436 op=UNLOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=435 op=UNLOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.301000 audit: BPF prog-id=437 op=LOAD Oct 27 13:25:38.301000 audit[9463]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=68bd55f8e4b8 a2=98 a3=0 items=0 ppid=9453 pid=9463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313664306336363564303465316433386539663436383463 Oct 27 13:25:38.320227 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:38.324789 kernel: docker0: port 1(vethadbf01a) entered blocking state Oct 27 13:25:38.324852 kernel: docker0: port 1(vethadbf01a) entered disabled state Oct 27 13:25:38.327882 kernel: vethadbf01a: entered allmulticast mode Oct 27 13:25:38.331002 kernel: vethadbf01a: entered promiscuous mode Oct 27 13:25:38.316000 audit: ANOM_PROMISCUOUS dev=vethadbf01a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:38.316000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472ae0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:38.334000 audit[9486]: NETFILTER_CFG table=raw:195 family=2 entries=1 op=nft_register_rule pid=9486 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:38.334000 audit[9486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffa662a30 a2=0 a3=0 items=0 ppid=2508 pid=9486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:38.334000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:38.336139 systemd-networkd[1681]: vethadbf01a: Link UP Oct 27 13:25:38.360115 kernel: eth0: renamed from veth3ed6b9d Oct 27 13:25:38.360221 kernel: docker0: port 1(vethadbf01a) entered blocking state Oct 27 13:25:38.360241 kernel: docker0: port 1(vethadbf01a) entered forwarding state Oct 27 13:25:38.362767 systemd-networkd[1681]: vethadbf01a: Gained carrier Oct 27 13:25:38.363006 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:39.387162 systemd[1]: docker-616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c.scope: Deactivated successfully. Oct 27 13:25:39.398607 dockerd[2508]: time="2026-10-27T13:25:39.398570182Z" level=info msg="ignoring event" container=616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:39.399222 containerd[1962]: time="2026-10-27T13:25:39.399079633Z" level=info msg="shim disconnected" id=616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c namespace=moby Oct 27 13:25:39.399222 containerd[1962]: time="2026-10-27T13:25:39.399140909Z" level=info msg="cleaning up after shim disconnected" id=616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c namespace=moby Oct 27 13:25:39.399222 containerd[1962]: time="2026-10-27T13:25:39.399148101Z" level=info msg="cleaning up dead shim" id=616d0c665d04e1d38e9f4684ce18a136ce373031b900796abcdd4fd170ba1c1c namespace=moby Oct 27 13:25:39.418905 systemd-networkd[1681]: vethadbf01a: Lost carrier Oct 27 13:25:39.420215 kernel: docker0: port 1(vethadbf01a) entered disabled state Oct 27 13:25:39.420245 kernel: veth3ed6b9d: renamed from eth0 Oct 27 13:25:39.435000 audit[9516]: NETFILTER_CFG table=raw:196 family=2 entries=1 op=nft_unregister_rule pid=9516 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:39.435000 audit[9516]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffde72a7b0 a2=0 a3=0 items=0 ppid=2508 pid=9516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.435000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:39.444515 systemd-networkd[1681]: vethadbf01a: Link DOWN Oct 27 13:25:39.449130 kernel: docker0: port 1(vethadbf01a) entered disabled state Oct 27 13:25:39.456216 kernel: vethadbf01a (unregistering): left allmulticast mode Oct 27 13:25:39.456281 kernel: vethadbf01a (unregistering): left promiscuous mode Oct 27 13:25:39.443000 audit: ANOM_PROMISCUOUS dev=vethadbf01a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:39.459976 kernel: docker0: port 1(vethadbf01a) entered disabled state Oct 27 13:25:39.443000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775640 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:39.475990 systemd[1]: run-docker-netns-6fdb82ee2331.mount: Deactivated successfully. Oct 27 13:25:39.478319 systemd[1]: var-lib-docker-overlay2-5572f8dfaa2d9c09e06d2dee33aa87916eea657d650a6500b790d7576e84f7d9-merged.mount: Deactivated successfully. Oct 27 13:25:39.489000 audit: BPF prog-id=433 op=UNLOAD Oct 27 13:25:39.489000 audit: BPF prog-id=437 op=UNLOAD Oct 27 13:25:39.582824 systemd[1]: var-lib-docker-overlay2-4f689f56dcc03910172fbdd21a3062bfcf0ebe9d41e878cb16d10900c2af8d61\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:39.665972 containerd[1962]: time="2026-10-27T13:25:39.665276470Z" level=info msg="connecting to shim a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f" address="unix:///run/containerd/s/93a317629a47dba61de8b39d43cdec560bdfa8d1cee2d6482d3c8c959a9a63d6" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:39.687280 systemd[1]: Started docker-a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f.scope - libcontainer container a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f. Oct 27 13:25:39.694000 audit: BPF prog-id=438 op=LOAD Oct 27 13:25:39.694000 audit: BPF prog-id=439 op=LOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e9abf7a3f90 a2=98 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=439 op=UNLOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=440 op=LOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e9abf7a4268 a2=98 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=441 op=LOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5e9abf7a3fa8 a2=98 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=441 op=UNLOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=440 op=UNLOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.694000 audit: BPF prog-id=442 op=LOAD Oct 27 13:25:39.694000 audit[9544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e9abf7a44b8 a2=98 a3=0 items=0 ppid=9534 pid=9544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366239393431636331646333356362373865336237363534 Oct 27 13:25:39.717689 kernel: docker0: port 1(vethd67897d) entered blocking state Oct 27 13:25:39.717805 kernel: docker0: port 1(vethd67897d) entered disabled state Oct 27 13:25:39.720722 kernel: vethd67897d: entered allmulticast mode Oct 27 13:25:39.708000 audit: ANOM_PROMISCUOUS dev=vethd67897d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:39.708000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333cb0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.708000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:39.724453 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:39.726133 kernel: vethd67897d: entered promiscuous mode Oct 27 13:25:39.726000 audit[9569]: NETFILTER_CFG table=raw:197 family=2 entries=1 op=nft_register_rule pid=9569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:39.726000 audit[9569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff0385d10 a2=0 a3=0 items=0 ppid=2508 pid=9569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:39.726000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:39.728518 systemd-networkd[1681]: vethd67897d: Link UP Oct 27 13:25:39.743113 kernel: eth0: renamed from veth805b790 Oct 27 13:25:39.750825 kernel: docker0: port 1(vethd67897d) entered blocking state Oct 27 13:25:39.750892 kernel: docker0: port 1(vethd67897d) entered forwarding state Oct 27 13:25:39.751368 systemd-networkd[1681]: vethd67897d: Gained carrier Oct 27 13:25:39.752200 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:40.779262 systemd[1]: docker-a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f.scope: Deactivated successfully. Oct 27 13:25:40.791630 dockerd[2508]: time="2026-10-27T13:25:40.791595965Z" level=info msg="ignoring event" container=a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:40.792229 containerd[1962]: time="2026-10-27T13:25:40.792024196Z" level=info msg="shim disconnected" id=a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f namespace=moby Oct 27 13:25:40.792229 containerd[1962]: time="2026-10-27T13:25:40.792050291Z" level=info msg="cleaning up after shim disconnected" id=a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f namespace=moby Oct 27 13:25:40.792229 containerd[1962]: time="2026-10-27T13:25:40.792056195Z" level=info msg="cleaning up dead shim" id=a6b9941cc1dc35cb78e3b7654b320913950ea8d350b774cd3d84f0ec882b833f namespace=moby Oct 27 13:25:40.813436 systemd-networkd[1681]: vethd67897d: Lost carrier Oct 27 13:25:40.814123 kernel: docker0: port 1(vethd67897d) entered disabled state Oct 27 13:25:40.814173 kernel: veth805b790: renamed from eth0 Oct 27 13:25:40.832000 audit[9600]: NETFILTER_CFG table=raw:198 family=2 entries=1 op=nft_unregister_rule pid=9600 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:40.832000 audit[9600]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffe17d5a0 a2=0 a3=0 items=0 ppid=2508 pid=9600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:40.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:40.837477 systemd-networkd[1681]: vethd67897d: Link DOWN Oct 27 13:25:40.845167 kernel: docker0: port 1(vethd67897d) entered disabled state Oct 27 13:25:40.845233 kernel: vethd67897d (unregistering): left allmulticast mode Oct 27 13:25:40.849441 kernel: vethd67897d (unregistering): left promiscuous mode Oct 27 13:25:40.836000 audit: ANOM_PROMISCUOUS dev=vethd67897d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:40.853691 kernel: docker0: port 1(vethd67897d) entered disabled state Oct 27 13:25:40.836000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053000 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:40.836000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:40.866304 systemd[1]: run-docker-netns-7cd74663e699.mount: Deactivated successfully. Oct 27 13:25:40.869121 systemd[1]: var-lib-docker-overlay2-4f689f56dcc03910172fbdd21a3062bfcf0ebe9d41e878cb16d10900c2af8d61-merged.mount: Deactivated successfully. Oct 27 13:25:40.884000 audit: BPF prog-id=438 op=UNLOAD Oct 27 13:25:40.884000 audit: BPF prog-id=442 op=UNLOAD Oct 27 13:25:40.987238 containerd[1962]: time="2026-10-27T13:25:40.987139117Z" level=info msg="connecting to shim a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a" address="unix:///run/containerd/s/01283e19638ac52c77feb217274c9d2e99b0f39369b905a81455c81c1e7caf5a" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:41.012265 systemd[1]: Started docker-a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a.scope - libcontainer container a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a. Oct 27 13:25:41.020000 audit: BPF prog-id=443 op=LOAD Oct 27 13:25:41.020000 audit: BPF prog-id=444 op=LOAD Oct 27 13:25:41.020000 audit[9628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fb80b1f9f90 a2=98 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.020000 audit: BPF prog-id=444 op=UNLOAD Oct 27 13:25:41.020000 audit[9628]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.021000 audit: BPF prog-id=445 op=LOAD Oct 27 13:25:41.021000 audit[9628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fb80b1fa268 a2=98 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.021000 audit: BPF prog-id=446 op=LOAD Oct 27 13:25:41.021000 audit[9628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7fb80b1f9fa8 a2=98 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.021000 audit: BPF prog-id=446 op=UNLOAD Oct 27 13:25:41.021000 audit[9628]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.021000 audit: BPF prog-id=445 op=UNLOAD Oct 27 13:25:41.021000 audit[9628]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.022000 audit: BPF prog-id=447 op=LOAD Oct 27 13:25:41.022000 audit[9628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fb80b1fa4b8 a2=98 a3=0 items=0 ppid=9616 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61336238333837383635623634353163343430666566376334 Oct 27 13:25:41.035268 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:41.043769 kernel: docker0: port 1(vethb2b5cec) entered blocking state Oct 27 13:25:41.043850 kernel: docker0: port 1(vethb2b5cec) entered disabled state Oct 27 13:25:41.046575 kernel: vethb2b5cec: entered allmulticast mode Oct 27 13:25:41.049351 kernel: vethb2b5cec: entered promiscuous mode Oct 27 13:25:41.034000 audit: ANOM_PROMISCUOUS dev=vethb2b5cec prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:41.034000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7ad0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:41.050000 audit[9648]: NETFILTER_CFG table=raw:199 family=2 entries=1 op=nft_register_rule pid=9648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:41.050000 audit[9648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd67f78b0 a2=0 a3=0 items=0 ppid=2508 pid=9648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:41.050000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:41.052424 systemd-networkd[1681]: vethb2b5cec: Link UP Oct 27 13:25:41.068126 kernel: eth0: renamed from vethf556212 Oct 27 13:25:41.075646 kernel: docker0: port 1(vethb2b5cec) entered blocking state Oct 27 13:25:41.075706 kernel: docker0: port 1(vethb2b5cec) entered forwarding state Oct 27 13:25:41.075736 systemd-networkd[1681]: vethb2b5cec: Gained carrier Oct 27 13:25:41.076348 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:42.099649 systemd[1]: docker-a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a.scope: Deactivated successfully. Oct 27 13:25:42.112653 dockerd[2508]: time="2026-10-27T13:25:42.112467392Z" level=info msg="ignoring event" container=a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:42.113687 containerd[1962]: time="2026-10-27T13:25:42.112639118Z" level=info msg="shim disconnected" id=a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a namespace=moby Oct 27 13:25:42.113687 containerd[1962]: time="2026-10-27T13:25:42.113019192Z" level=info msg="cleaning up after shim disconnected" id=a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a namespace=moby Oct 27 13:25:42.113687 containerd[1962]: time="2026-10-27T13:25:42.113027640Z" level=info msg="cleaning up dead shim" id=a3b8387865b6451c440fef7c4c3191dbfd0a696356ea5d72fd7fe7ec45d51a9a namespace=moby Oct 27 13:25:42.133051 systemd-networkd[1681]: vethb2b5cec: Lost carrier Oct 27 13:25:42.133384 kernel: docker0: port 1(vethb2b5cec) entered disabled state Oct 27 13:25:42.137115 kernel: vethf556212: renamed from eth0 Oct 27 13:25:42.149000 audit[9679]: NETFILTER_CFG table=raw:200 family=2 entries=1 op=nft_unregister_rule pid=9679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:42.149000 audit[9679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd5d91660 a2=0 a3=0 items=0 ppid=2508 pid=9679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:42.156512 systemd-networkd[1681]: vethb2b5cec: Link DOWN Oct 27 13:25:42.161309 kernel: docker0: port 1(vethb2b5cec) entered disabled state Oct 27 13:25:42.168130 kernel: vethb2b5cec (unregistering): left allmulticast mode Oct 27 13:25:42.168191 kernel: vethb2b5cec (unregistering): left promiscuous mode Oct 27 13:25:42.155000 audit: ANOM_PROMISCUOUS dev=vethb2b5cec prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:42.171672 kernel: docker0: port 1(vethb2b5cec) entered disabled state Oct 27 13:25:42.155000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1780 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.155000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:42.183323 systemd[1]: run-docker-netns-6f66a91933ab.mount: Deactivated successfully. Oct 27 13:25:42.187434 systemd[1]: var-lib-docker-overlay2-33eca50c7c91378a43224f3f59cfdb3346953713403eff3aec91609656484c5f-merged.mount: Deactivated successfully. Oct 27 13:25:42.194000 audit: BPF prog-id=443 op=UNLOAD Oct 27 13:25:42.194000 audit: BPF prog-id=447 op=UNLOAD Oct 27 13:25:42.275043 systemd[1]: var-lib-docker-overlay2-69e893d205aa45890d7537a4d619e3034b5021ec6b53ba4d003337b21c76c0e2\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:42.334841 containerd[1962]: time="2026-10-27T13:25:42.334747994Z" level=info msg="connecting to shim 863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3" address="unix:///run/containerd/s/ac452bc1abd1bc7fa4ce9b0f41614730e6feb38caa6716a0d1dc48ae0a1edd42" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:42.352257 systemd[1]: Started docker-863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3.scope - libcontainer container 863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3. Oct 27 13:25:42.359000 audit: BPF prog-id=448 op=LOAD Oct 27 13:25:42.360000 audit: BPF prog-id=449 op=LOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69607f78df90 a2=98 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.360000 audit: BPF prog-id=449 op=UNLOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.360000 audit: BPF prog-id=450 op=LOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69607f78e268 a2=98 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.360000 audit: BPF prog-id=451 op=LOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=69607f78dfa8 a2=98 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.360000 audit: BPF prog-id=451 op=UNLOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.360000 audit: BPF prog-id=450 op=UNLOAD Oct 27 13:25:42.360000 audit[9708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.361000 audit: BPF prog-id=452 op=LOAD Oct 27 13:25:42.361000 audit[9708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69607f78e4b8 a2=98 a3=0 items=0 ppid=9697 pid=9708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363361643139393236373137666432666565633062326332 Oct 27 13:25:42.374590 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:42.382068 kernel: docker0: port 1(veth3d2a3f7) entered blocking state Oct 27 13:25:42.382171 kernel: docker0: port 1(veth3d2a3f7) entered disabled state Oct 27 13:25:42.384688 kernel: veth3d2a3f7: entered allmulticast mode Oct 27 13:25:42.387412 kernel: veth3d2a3f7: entered promiscuous mode Oct 27 13:25:42.373000 audit: ANOM_PROMISCUOUS dev=veth3d2a3f7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:42.373000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c65f50 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.373000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:42.390000 audit[9731]: NETFILTER_CFG table=raw:201 family=2 entries=1 op=nft_register_rule pid=9731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:42.390000 audit[9731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff3b09c70 a2=0 a3=0 items=0 ppid=2508 pid=9731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:42.390000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:42.394310 systemd-networkd[1681]: veth3d2a3f7: Link UP Oct 27 13:25:42.407120 kernel: eth0: renamed from veth626297d Oct 27 13:25:42.414044 kernel: docker0: port 1(veth3d2a3f7) entered blocking state Oct 27 13:25:42.414124 kernel: docker0: port 1(veth3d2a3f7) entered forwarding state Oct 27 13:25:42.414307 systemd-networkd[1681]: veth3d2a3f7: Gained carrier Oct 27 13:25:42.414855 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:43.438971 systemd[1]: docker-863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3.scope: Deactivated successfully. Oct 27 13:25:43.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4128-10.0.0.24:22-109.160.32.131:56330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:43.450797 systemd[1]: Started sshd@51-4128-10.0.0.24:22-109.160.32.131:56330.service - OpenSSH per-connection server daemon (109.160.32.131:56330). Oct 27 13:25:43.454454 kernel: kauditd_printk_skb: 136 callbacks suppressed Oct 27 13:25:43.454492 kernel: audit: type=1130 audit(1793107543.449:1581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4128-10.0.0.24:22-109.160.32.131:56330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:43.469526 dockerd[2508]: time="2026-10-27T13:25:43.469484211Z" level=info msg="ignoring event" container=863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:43.470066 containerd[1962]: time="2026-10-27T13:25:43.470011443Z" level=info msg="shim disconnected" id=863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3 namespace=moby Oct 27 13:25:43.470066 containerd[1962]: time="2026-10-27T13:25:43.470059248Z" level=info msg="cleaning up after shim disconnected" id=863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3 namespace=moby Oct 27 13:25:43.470066 containerd[1962]: time="2026-10-27T13:25:43.470067183Z" level=info msg="cleaning up dead shim" id=863ad19926717fd2feec0b2c2f14aef73a47c2bf201c98ccc3d83e0f99d590a3 namespace=moby Oct 27 13:25:43.493780 systemd-networkd[1681]: veth3d2a3f7: Lost carrier Oct 27 13:25:43.494272 kernel: docker0: port 1(veth3d2a3f7) entered disabled state Oct 27 13:25:43.498110 kernel: veth626297d: renamed from eth0 Oct 27 13:25:43.512000 audit[9765]: NETFILTER_CFG table=raw:202 family=2 entries=1 op=nft_unregister_rule pid=9765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:43.512000 audit[9765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff2956d40 a2=0 a3=0 items=0 ppid=2508 pid=9765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.539510 kernel: audit: type=1325 audit(1793107543.512:1582): table=raw:202 family=2 entries=1 op=nft_unregister_rule pid=9765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:43.539591 kernel: audit: type=1300 audit(1793107543.512:1582): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff2956d40 a2=0 a3=0 items=0 ppid=2508 pid=9765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.512000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:43.551670 kernel: audit: type=1327 audit(1793107543.512:1582): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:43.555945 kernel: docker0: port 1(veth3d2a3f7) entered disabled state Oct 27 13:25:43.552371 systemd-networkd[1681]: veth3d2a3f7: Link DOWN Oct 27 13:25:43.565476 kernel: veth3d2a3f7 (unregistering): left allmulticast mode Oct 27 13:25:43.565551 kernel: veth3d2a3f7 (unregistering): left promiscuous mode Oct 27 13:25:43.540000 audit: ANOM_PROMISCUOUS dev=veth3d2a3f7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:43.569081 kernel: docker0: port 1(veth3d2a3f7) entered disabled state Oct 27 13:25:43.569125 kernel: audit: type=1700 audit(1793107543.540:1583): dev=veth3d2a3f7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:43.540000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce3a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:43.612857 kernel: audit: type=1300 audit(1793107543.540:1583): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce3a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.612912 kernel: audit: type=1327 audit(1793107543.540:1583): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:43.614929 systemd[1]: run-docker-netns-3c39a0c2e909.mount: Deactivated successfully. Oct 27 13:25:43.619204 systemd[1]: var-lib-docker-overlay2-69e893d205aa45890d7537a4d619e3034b5021ec6b53ba4d003337b21c76c0e2-merged.mount: Deactivated successfully. Oct 27 13:25:43.627000 audit: BPF prog-id=448 op=UNLOAD Oct 27 13:25:43.627000 audit: BPF prog-id=452 op=UNLOAD Oct 27 13:25:43.676960 kernel: audit: type=1334 audit(1793107543.627:1584): prog-id=448 op=UNLOAD Oct 27 13:25:43.677010 kernel: audit: type=1334 audit(1793107543.627:1585): prog-id=452 op=UNLOAD Oct 27 13:25:43.755370 systemd[1]: var-lib-docker-overlay2-8098b119f82f5b49ebb1867819aa3e38f254dd9a6f6e4c5188a0a506a130d602-merged.mount: Deactivated successfully. Oct 27 13:25:43.797332 containerd[1962]: time="2026-10-27T13:25:43.797236345Z" level=info msg="connecting to shim 9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241" address="unix:///run/containerd/s/1e95e9bf0f2cbeb412ebe1666917e60fdabe5da981402ca3a56e2eb391a3bd4f" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:43.819256 systemd[1]: Started docker-9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241.scope - libcontainer container 9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241. Oct 27 13:25:43.828000 audit: BPF prog-id=453 op=LOAD Oct 27 13:25:43.828000 audit: BPF prog-id=454 op=LOAD Oct 27 13:25:43.828000 audit[9794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5ccb63faff90 a2=98 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=454 op=UNLOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=455 op=LOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5ccb63fb0268 a2=98 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=456 op=LOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5ccb63faffa8 a2=98 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=456 op=UNLOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=455 op=UNLOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.832000 audit: BPF prog-id=457 op=LOAD Oct 27 13:25:43.832000 audit[9794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5ccb63fb04b8 a2=98 a3=0 items=0 ppid=9783 pid=9794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663333653664393338366334663132643635343735373361 Oct 27 13:25:43.834689 kernel: audit: type=1334 audit(1793107543.828:1586): prog-id=453 op=LOAD Oct 27 13:25:43.853385 kernel: docker0: port 1(veth06a72a3) entered blocking state Oct 27 13:25:43.853474 kernel: docker0: port 1(veth06a72a3) entered disabled state Oct 27 13:25:43.856101 kernel: veth06a72a3: entered allmulticast mode Oct 27 13:25:43.858909 kernel: veth06a72a3: entered promiscuous mode Oct 27 13:25:43.845000 audit: ANOM_PROMISCUOUS dev=veth06a72a3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:43.845000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f980 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.845000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:43.860783 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:43.859000 audit[9816]: NETFILTER_CFG table=raw:203 family=2 entries=1 op=nft_register_rule pid=9816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:43.859000 audit[9816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffef95b810 a2=0 a3=0 items=0 ppid=2508 pid=9816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:43.859000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:43.861847 systemd-networkd[1681]: veth06a72a3: Link UP Oct 27 13:25:43.879510 kernel: eth0: renamed from vethb4f444d Oct 27 13:25:43.879593 kernel: docker0: port 1(veth06a72a3) entered blocking state Oct 27 13:25:43.882880 kernel: docker0: port 1(veth06a72a3) entered forwarding state Oct 27 13:25:43.883354 systemd-networkd[1681]: veth06a72a3: Gained carrier Oct 27 13:25:43.884140 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:44.558941 sshd[9747]: Invalid user ubuntu from 109.160.32.131 port 56330 Oct 27 13:25:44.867670 sshd[9747]: Connection closed by invalid user ubuntu 109.160.32.131 port 56330 [preauth] Oct 27 13:25:44.866000 audit[9747]: AUDIT1109 pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:44.869516 systemd[1]: sshd@51-4128-10.0.0.24:22-109.160.32.131:56330.service: Deactivated successfully. Oct 27 13:25:44.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-4128-10.0.0.24:22-109.160.32.131:56330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:44.908330 systemd[1]: docker-9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241.scope: Deactivated successfully. Oct 27 13:25:44.922138 dockerd[2508]: time="2026-10-27T13:25:44.922049156Z" level=info msg="ignoring event" container=9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:44.922622 containerd[1962]: time="2026-10-27T13:25:44.922215658Z" level=info msg="shim disconnected" id=9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241 namespace=moby Oct 27 13:25:44.922622 containerd[1962]: time="2026-10-27T13:25:44.922246640Z" level=info msg="cleaning up after shim disconnected" id=9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241 namespace=moby Oct 27 13:25:44.922622 containerd[1962]: time="2026-10-27T13:25:44.922252424Z" level=info msg="cleaning up dead shim" id=9f33e6d9386c4f12d6547573a0b4012f6956e697c05cc65849856021a9599241 namespace=moby Oct 27 13:25:44.944633 systemd-networkd[1681]: veth06a72a3: Lost carrier Oct 27 13:25:44.945395 kernel: docker0: port 1(veth06a72a3) entered disabled state Oct 27 13:25:44.945438 kernel: vethb4f444d: renamed from eth0 Oct 27 13:25:44.963000 audit[9847]: NETFILTER_CFG table=raw:204 family=2 entries=1 op=nft_unregister_rule pid=9847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:44.963000 audit[9847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffec2a2470 a2=0 a3=0 items=0 ppid=2508 pid=9847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:44.963000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:44.968573 systemd-networkd[1681]: veth06a72a3: Link DOWN Oct 27 13:25:44.975689 kernel: docker0: port 1(veth06a72a3) entered disabled state Oct 27 13:25:44.975754 kernel: veth06a72a3 (unregistering): left allmulticast mode Oct 27 13:25:44.979122 kernel: veth06a72a3 (unregistering): left promiscuous mode Oct 27 13:25:44.967000 audit: ANOM_PROMISCUOUS dev=veth06a72a3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:44.982705 kernel: docker0: port 1(veth06a72a3) entered disabled state Oct 27 13:25:44.967000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce000 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:44.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:44.993067 systemd[1]: run-docker-netns-67ea07238cdc.mount: Deactivated successfully. Oct 27 13:25:44.995471 systemd[1]: var-lib-docker-overlay2-8098b119f82f5b49ebb1867819aa3e38f254dd9a6f6e4c5188a0a506a130d602-merged.mount: Deactivated successfully. Oct 27 13:25:45.004000 audit: BPF prog-id=453 op=UNLOAD Oct 27 13:25:45.004000 audit: BPF prog-id=457 op=UNLOAD Oct 27 13:25:45.070535 systemd[1]: var-lib-docker-overlay2-759b3e3654e5a3b7f599dd1508a6fc15f7a4496a0d24e495d764546c277c6eaa\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:45.133535 containerd[1962]: time="2026-10-27T13:25:45.133422673Z" level=info msg="connecting to shim 92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb" address="unix:///run/containerd/s/33dcc19f369a54f83c9585a12ea1abe90030f0ae2ee0f3c813972ac6d4ee9baa" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:45.152275 systemd[1]: Started docker-92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb.scope - libcontainer container 92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb. Oct 27 13:25:45.159000 audit: BPF prog-id=458 op=LOAD Oct 27 13:25:45.159000 audit: BPF prog-id=459 op=LOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4d43c3fd7f90 a2=98 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=459 op=UNLOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=460 op=LOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4d43c3fd8268 a2=98 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=461 op=LOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4d43c3fd7fa8 a2=98 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=461 op=UNLOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=460 op=UNLOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.159000 audit: BPF prog-id=462 op=LOAD Oct 27 13:25:45.159000 audit[9875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4d43c3fd84b8 a2=98 a3=0 items=0 ppid=9864 pid=9875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326233393764366561613661366131396237383661363231 Oct 27 13:25:45.177402 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:45.181037 kernel: docker0: port 1(veth07423d8) entered blocking state Oct 27 13:25:45.181119 kernel: docker0: port 1(veth07423d8) entered disabled state Oct 27 13:25:45.184295 kernel: veth07423d8: entered allmulticast mode Oct 27 13:25:45.187012 kernel: veth07423d8: entered promiscuous mode Oct 27 13:25:45.172000 audit: ANOM_PROMISCUOUS dev=veth07423d8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:45.172000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332630 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:45.188000 audit[9896]: NETFILTER_CFG table=raw:205 family=2 entries=1 op=nft_register_rule pid=9896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:45.188000 audit[9896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd459d360 a2=0 a3=0 items=0 ppid=2508 pid=9896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:45.188000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:45.189558 systemd-networkd[1681]: veth07423d8: Link UP Oct 27 13:25:45.202118 kernel: eth0: renamed from vethd566f08 Oct 27 13:25:45.209006 kernel: docker0: port 1(veth07423d8) entered blocking state Oct 27 13:25:45.209067 kernel: docker0: port 1(veth07423d8) entered forwarding state Oct 27 13:25:45.209326 systemd-networkd[1681]: veth07423d8: Gained carrier Oct 27 13:25:45.209728 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:46.238365 systemd[1]: docker-92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb.scope: Deactivated successfully. Oct 27 13:25:46.250830 dockerd[2508]: time="2026-10-27T13:25:46.250751793Z" level=info msg="ignoring event" container=92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:46.251388 containerd[1962]: time="2026-10-27T13:25:46.251238803Z" level=info msg="shim disconnected" id=92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb namespace=moby Oct 27 13:25:46.251388 containerd[1962]: time="2026-10-27T13:25:46.251265498Z" level=info msg="cleaning up after shim disconnected" id=92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb namespace=moby Oct 27 13:25:46.251388 containerd[1962]: time="2026-10-27T13:25:46.251273505Z" level=info msg="cleaning up dead shim" id=92b397d6eaa6a6a19b786a621924298786db3d1faf30a06580dd5e1c108011eb namespace=moby Oct 27 13:25:46.273498 systemd-networkd[1681]: veth07423d8: Lost carrier Oct 27 13:25:46.274123 kernel: docker0: port 1(veth07423d8) entered disabled state Oct 27 13:25:46.274174 kernel: vethd566f08: renamed from eth0 Oct 27 13:25:46.290000 audit[9926]: NETFILTER_CFG table=raw:206 family=2 entries=1 op=nft_unregister_rule pid=9926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:46.290000 audit[9926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdf310aa0 a2=0 a3=0 items=0 ppid=2508 pid=9926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.290000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:46.298632 systemd-networkd[1681]: veth07423d8: Link DOWN Oct 27 13:25:46.303178 kernel: docker0: port 1(veth07423d8) entered disabled state Oct 27 13:25:46.311779 kernel: veth07423d8 (unregistering): left allmulticast mode Oct 27 13:25:46.311856 kernel: veth07423d8 (unregistering): left promiscuous mode Oct 27 13:25:46.297000 audit: ANOM_PROMISCUOUS dev=veth07423d8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:46.316153 kernel: docker0: port 1(veth07423d8) entered disabled state Oct 27 13:25:46.297000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159bcc0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:46.333142 systemd[1]: run-docker-netns-cb5eb47d1c01.mount: Deactivated successfully. Oct 27 13:25:46.335393 systemd[1]: var-lib-docker-overlay2-759b3e3654e5a3b7f599dd1508a6fc15f7a4496a0d24e495d764546c277c6eaa-merged.mount: Deactivated successfully. Oct 27 13:25:46.342000 audit: BPF prog-id=458 op=UNLOAD Oct 27 13:25:46.342000 audit: BPF prog-id=462 op=UNLOAD Oct 27 13:25:46.426885 systemd[1]: var-lib-docker-overlay2-4a2dcdaaa33d01cc564fef573840e3fed118e333c7e3a32143545b5a23b8c8ea\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:46.485780 containerd[1962]: time="2026-10-27T13:25:46.485740017Z" level=info msg="connecting to shim dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2" address="unix:///run/containerd/s/427447c45e11f97aaf9ec987af5ad757ee27f6012359452c259debc6c099fbf8" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:46.502256 systemd[1]: Started docker-dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2.scope - libcontainer container dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2. Oct 27 13:25:46.511000 audit: BPF prog-id=463 op=LOAD Oct 27 13:25:46.511000 audit: BPF prog-id=464 op=LOAD Oct 27 13:25:46.511000 audit[9953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4742083fbf90 a2=98 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.511000 audit: BPF prog-id=464 op=UNLOAD Oct 27 13:25:46.511000 audit[9953]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.512000 audit: BPF prog-id=465 op=LOAD Oct 27 13:25:46.512000 audit[9953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4742083fc268 a2=98 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.512000 audit: BPF prog-id=466 op=LOAD Oct 27 13:25:46.512000 audit[9953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=4742083fbfa8 a2=98 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.512000 audit: BPF prog-id=466 op=UNLOAD Oct 27 13:25:46.512000 audit[9953]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.512000 audit: BPF prog-id=465 op=UNLOAD Oct 27 13:25:46.512000 audit[9953]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.513000 audit: BPF prog-id=467 op=LOAD Oct 27 13:25:46.513000 audit[9953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4742083fc4b8 a2=98 a3=0 items=0 ppid=9943 pid=9953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643562646338343036316334623961343264633164633332 Oct 27 13:25:46.526402 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:46.532567 kernel: docker0: port 1(veth94ab534) entered blocking state Oct 27 13:25:46.532630 kernel: docker0: port 1(veth94ab534) entered disabled state Oct 27 13:25:46.535456 kernel: veth94ab534: entered allmulticast mode Oct 27 13:25:46.538237 kernel: veth94ab534: entered promiscuous mode Oct 27 13:25:46.525000 audit: ANOM_PROMISCUOUS dev=veth94ab534 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:46.525000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c20473e0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:46.541000 audit[9975]: NETFILTER_CFG table=raw:207 family=2 entries=1 op=nft_register_rule pid=9975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:46.541000 audit[9975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff6697100 a2=0 a3=0 items=0 ppid=2508 pid=9975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:46.541000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:46.541890 systemd-networkd[1681]: veth94ab534: Link UP Oct 27 13:25:46.554110 kernel: eth0: renamed from veth00c79e6 Oct 27 13:25:46.561464 kernel: docker0: port 1(veth94ab534) entered blocking state Oct 27 13:25:46.561522 kernel: docker0: port 1(veth94ab534) entered forwarding state Oct 27 13:25:46.561795 systemd-networkd[1681]: veth94ab534: Gained carrier Oct 27 13:25:46.562154 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:47.586388 systemd[1]: docker-dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2.scope: Deactivated successfully. Oct 27 13:25:47.600069 dockerd[2508]: time="2026-10-27T13:25:47.600033348Z" level=info msg="ignoring event" container=dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:47.601265 containerd[1962]: time="2026-10-27T13:25:47.601233155Z" level=info msg="shim disconnected" id=dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2 namespace=moby Oct 27 13:25:47.601265 containerd[1962]: time="2026-10-27T13:25:47.601262274Z" level=info msg="cleaning up after shim disconnected" id=dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2 namespace=moby Oct 27 13:25:47.601265 containerd[1962]: time="2026-10-27T13:25:47.601268681Z" level=info msg="cleaning up dead shim" id=dd5bdc84061c4b9a42dc1dc32276bf3bd5bc85727c6a208e3bb88c46f72568a2 namespace=moby Oct 27 13:25:47.621425 systemd-networkd[1681]: veth94ab534: Lost carrier Oct 27 13:25:47.624796 kernel: docker0: port 1(veth94ab534) entered disabled state Oct 27 13:25:47.624863 kernel: veth00c79e6: renamed from eth0 Oct 27 13:25:47.642000 audit[10004]: NETFILTER_CFG table=raw:208 family=2 entries=1 op=nft_unregister_rule pid=10004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:47.642000 audit[10004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe2e1f010 a2=0 a3=0 items=0 ppid=2508 pid=10004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.642000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:47.649590 systemd-networkd[1681]: veth94ab534: Link DOWN Oct 27 13:25:47.654114 kernel: docker0: port 1(veth94ab534) entered disabled state Oct 27 13:25:47.661749 kernel: veth94ab534 (unregistering): left allmulticast mode Oct 27 13:25:47.661817 kernel: veth94ab534 (unregistering): left promiscuous mode Oct 27 13:25:47.649000 audit: ANOM_PROMISCUOUS dev=veth94ab534 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:47.665571 kernel: docker0: port 1(veth94ab534) entered disabled state Oct 27 13:25:47.649000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf320 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.649000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:47.675995 systemd[1]: run-docker-netns-e49a1f34ffa6.mount: Deactivated successfully. Oct 27 13:25:47.680421 systemd[1]: var-lib-docker-overlay2-4a2dcdaaa33d01cc564fef573840e3fed118e333c7e3a32143545b5a23b8c8ea-merged.mount: Deactivated successfully. Oct 27 13:25:47.693000 audit: BPF prog-id=463 op=UNLOAD Oct 27 13:25:47.693000 audit: BPF prog-id=467 op=UNLOAD Oct 27 13:25:47.771332 systemd[1]: var-lib-docker-overlay2-fce6437cce4c8e0351470f84a631ce7cbc8cd29162b123fdcd83d3c878145fee\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:47.837038 containerd[1962]: time="2026-10-27T13:25:47.837000053Z" level=info msg="connecting to shim a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922" address="unix:///run/containerd/s/83cd77fced887a615fd86452e610bbeca940c4d37dc0cc4699598a3a393cf2c0" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:47.857590 systemd[1]: Started docker-a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922.scope - libcontainer container a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922. Oct 27 13:25:47.866000 audit: BPF prog-id=468 op=LOAD Oct 27 13:25:47.867000 audit: BPF prog-id=469 op=LOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=226f8f145f90 a2=98 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=469 op=UNLOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=470 op=LOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=226f8f146268 a2=98 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=471 op=LOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=226f8f145fa8 a2=98 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=471 op=UNLOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=470 op=UNLOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.867000 audit: BPF prog-id=472 op=LOAD Oct 27 13:25:47.867000 audit[10034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=226f8f1464b8 a2=98 a3=0 items=0 ppid=10022 pid=10034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376265303238323539653366386435366338373432343061 Oct 27 13:25:47.883662 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:47.887583 kernel: docker0: port 1(veth59f4d91) entered blocking state Oct 27 13:25:47.887662 kernel: docker0: port 1(veth59f4d91) entered disabled state Oct 27 13:25:47.890819 kernel: veth59f4d91: entered allmulticast mode Oct 27 13:25:47.893733 kernel: veth59f4d91: entered promiscuous mode Oct 27 13:25:47.879000 audit: ANOM_PROMISCUOUS dev=veth59f4d91 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:47.879000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472840 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:47.896000 audit[10055]: NETFILTER_CFG table=raw:209 family=2 entries=1 op=nft_register_rule pid=10055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:47.896000 audit[10055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc2d9db80 a2=0 a3=0 items=0 ppid=2508 pid=10055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:47.896000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:47.897381 systemd-networkd[1681]: veth59f4d91: Link UP Oct 27 13:25:47.910118 kernel: eth0: renamed from vethfac33c5 Oct 27 13:25:47.917245 kernel: docker0: port 1(veth59f4d91) entered blocking state Oct 27 13:25:47.917298 kernel: docker0: port 1(veth59f4d91) entered forwarding state Oct 27 13:25:47.917464 systemd-networkd[1681]: veth59f4d91: Gained carrier Oct 27 13:25:47.917843 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:48.941995 systemd[1]: docker-a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922.scope: Deactivated successfully. Oct 27 13:25:48.955451 dockerd[2508]: time="2026-10-27T13:25:48.955404133Z" level=info msg="ignoring event" container=a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:48.956424 containerd[1962]: time="2026-10-27T13:25:48.956205148Z" level=info msg="shim disconnected" id=a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922 namespace=moby Oct 27 13:25:48.956424 containerd[1962]: time="2026-10-27T13:25:48.956306494Z" level=info msg="cleaning up after shim disconnected" id=a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922 namespace=moby Oct 27 13:25:48.956424 containerd[1962]: time="2026-10-27T13:25:48.956313126Z" level=info msg="cleaning up dead shim" id=a7be028259e3f8d56c874240a38ace8b3d33523cce37a5b34fc11ad0167e5922 namespace=moby Oct 27 13:25:48.976212 kernel: docker0: port 1(veth59f4d91) entered disabled state Oct 27 13:25:48.976242 systemd-networkd[1681]: veth59f4d91: Lost carrier Oct 27 13:25:48.980111 kernel: vethfac33c5: renamed from eth0 Oct 27 13:25:48.992000 audit[10086]: NETFILTER_CFG table=raw:210 family=2 entries=1 op=nft_unregister_rule pid=10086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:48.996909 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:48.996961 kernel: audit: type=1325 audit(1793107548.992:1640): table=raw:210 family=2 entries=1 op=nft_unregister_rule pid=10086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:48.992000 audit[10086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcbc2cee0 a2=0 a3=0 items=0 ppid=2508 pid=10086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.022061 kernel: audit: type=1300 audit(1793107548.992:1640): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcbc2cee0 a2=0 a3=0 items=0 ppid=2508 pid=10086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:48.992000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:49.037329 kernel: audit: type=1327 audit(1793107548.992:1640): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:49.034050 systemd-networkd[1681]: veth59f4d91: Link DOWN Oct 27 13:25:49.037475 kernel: docker0: port 1(veth59f4d91) entered disabled state Oct 27 13:25:49.041414 kernel: veth59f4d91 (unregistering): left allmulticast mode Oct 27 13:25:49.044942 kernel: veth59f4d91 (unregistering): left promiscuous mode Oct 27 13:25:49.021000 audit: ANOM_PROMISCUOUS dev=veth59f4d91 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:49.048259 kernel: docker0: port 1(veth59f4d91) entered disabled state Oct 27 13:25:49.048280 kernel: audit: type=1700 audit(1793107549.021:1641): dev=veth59f4d91 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:49.021000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c17744c0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.065304 systemd[1]: run-docker-netns-eb2060d41ac9.mount: Deactivated successfully. Oct 27 13:25:49.021000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:49.083074 systemd[1]: var-lib-docker-overlay2-fce6437cce4c8e0351470f84a631ce7cbc8cd29162b123fdcd83d3c878145fee-merged.mount: Deactivated successfully. Oct 27 13:25:49.094303 kernel: audit: type=1300 audit(1793107549.021:1641): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c17744c0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.094388 kernel: audit: type=1327 audit(1793107549.021:1641): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:49.107000 audit: BPF prog-id=468 op=UNLOAD Oct 27 13:25:49.107000 audit: BPF prog-id=472 op=UNLOAD Oct 27 13:25:49.127422 kernel: audit: type=1334 audit(1793107549.107:1642): prog-id=468 op=UNLOAD Oct 27 13:25:49.127472 kernel: audit: type=1334 audit(1793107549.107:1643): prog-id=472 op=UNLOAD Oct 27 13:25:49.242189 containerd[1962]: time="2026-10-27T13:25:49.241675752Z" level=info msg="connecting to shim 91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3" address="unix:///run/containerd/s/e7291fe2a817852869a0450e1eb2bbbe4da099aeced0703acb037cefc78912ca" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:49.263260 systemd[1]: Started docker-91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3.scope - libcontainer container 91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3. Oct 27 13:25:49.270000 audit: BPF prog-id=473 op=LOAD Oct 27 13:25:49.276126 kernel: audit: type=1334 audit(1793107549.270:1644): prog-id=473 op=LOAD Oct 27 13:25:49.275000 audit: BPF prog-id=474 op=LOAD Oct 27 13:25:49.275000 audit[10114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=756bebf53f90 a2=98 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.275000 audit: BPF prog-id=474 op=UNLOAD Oct 27 13:25:49.275000 audit[10114]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.275000 audit: BPF prog-id=475 op=LOAD Oct 27 13:25:49.275000 audit[10114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=756bebf54268 a2=98 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.279000 audit: BPF prog-id=476 op=LOAD Oct 27 13:25:49.279000 audit[10114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=756bebf53fa8 a2=98 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.279000 audit: BPF prog-id=476 op=UNLOAD Oct 27 13:25:49.279000 audit[10114]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.279000 audit: BPF prog-id=475 op=UNLOAD Oct 27 13:25:49.279000 audit[10114]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.281247 kernel: audit: type=1334 audit(1793107549.275:1645): prog-id=474 op=LOAD Oct 27 13:25:49.280000 audit: BPF prog-id=477 op=LOAD Oct 27 13:25:49.280000 audit[10114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=756bebf544b8 a2=98 a3=0 items=0 ppid=10102 pid=10114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39316163643933323966643331636563613836643466656535 Oct 27 13:25:49.291217 systemd[1]: Started sshd@52-4129-10.0.0.24:22-109.160.32.131:56376.service - OpenSSH per-connection server daemon (109.160.32.131:56376). Oct 27 13:25:49.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4129-10.0.0.24:22-109.160.32.131:56376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:49.300502 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:49.307513 kernel: docker0: port 1(vethd625c0d) entered blocking state Oct 27 13:25:49.307578 kernel: docker0: port 1(vethd625c0d) entered disabled state Oct 27 13:25:49.312764 kernel: vethd625c0d: entered allmulticast mode Oct 27 13:25:49.315937 kernel: vethd625c0d: entered promiscuous mode Oct 27 13:25:49.299000 audit: ANOM_PROMISCUOUS dev=vethd625c0d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:49.299000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64a20 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:49.318000 audit[10136]: NETFILTER_CFG table=raw:211 family=2 entries=1 op=nft_register_rule pid=10136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:49.318000 audit[10136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd749c970 a2=0 a3=0 items=0 ppid=2508 pid=10136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:49.318000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:49.321006 systemd-networkd[1681]: vethd625c0d: Link UP Oct 27 13:25:49.335122 kernel: eth0: renamed from veth3f5c5e9 Oct 27 13:25:49.343498 kernel: docker0: port 1(vethd625c0d) entered blocking state Oct 27 13:25:49.343203 systemd-networkd[1681]: vethd625c0d: Gained carrier Oct 27 13:25:49.343634 kernel: docker0: port 1(vethd625c0d) entered forwarding state Oct 27 13:25:49.343406 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:50.315634 sshd[10133]: Invalid user openvpn from 109.160.32.131 port 56376 Oct 27 13:25:50.366497 systemd[1]: docker-91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3.scope: Deactivated successfully. Oct 27 13:25:50.379060 dockerd[2508]: time="2026-10-27T13:25:50.379015270Z" level=info msg="ignoring event" container=91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:50.380044 containerd[1962]: time="2026-10-27T13:25:50.379997467Z" level=info msg="shim disconnected" id=91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3 namespace=moby Oct 27 13:25:50.380044 containerd[1962]: time="2026-10-27T13:25:50.380026833Z" level=info msg="cleaning up after shim disconnected" id=91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3 namespace=moby Oct 27 13:25:50.380044 containerd[1962]: time="2026-10-27T13:25:50.380034872Z" level=info msg="cleaning up dead shim" id=91acd9329fd31ceca86d4fee52c98d3d3cf2d6132c0723e73304e6d8378315f3 namespace=moby Oct 27 13:25:50.400823 systemd-networkd[1681]: vethd625c0d: Lost carrier Oct 27 13:25:50.401158 kernel: docker0: port 1(vethd625c0d) entered disabled state Oct 27 13:25:50.405125 kernel: veth3f5c5e9: renamed from eth0 Oct 27 13:25:50.422000 audit[10167]: NETFILTER_CFG table=raw:212 family=2 entries=1 op=nft_unregister_rule pid=10167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:50.422000 audit[10167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd8eeb8a0 a2=0 a3=0 items=0 ppid=2508 pid=10167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.422000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:50.434626 systemd-networkd[1681]: vethd625c0d: Link DOWN Oct 27 13:25:50.442343 kernel: docker0: port 1(vethd625c0d) entered disabled state Oct 27 13:25:50.442425 kernel: vethd625c0d (unregistering): left allmulticast mode Oct 27 13:25:50.446363 kernel: vethd625c0d (unregistering): left promiscuous mode Oct 27 13:25:50.433000 audit: ANOM_PROMISCUOUS dev=vethd625c0d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:50.450810 kernel: docker0: port 1(vethd625c0d) entered disabled state Oct 27 13:25:50.433000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1053d20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.433000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:50.462136 systemd[1]: run-docker-netns-7b3ddc02a8a3.mount: Deactivated successfully. Oct 27 13:25:50.466366 systemd[1]: var-lib-docker-overlay2-a6be5d6faf66e5fb317c6ec62ef92000b970e647eba6b62d273541bdd0e90d80-merged.mount: Deactivated successfully. Oct 27 13:25:50.471000 audit: BPF prog-id=473 op=UNLOAD Oct 27 13:25:50.471000 audit: BPF prog-id=477 op=UNLOAD Oct 27 13:25:50.587235 systemd[1]: var-lib-docker-overlay2-2da0f9a776593f3ace90548683853e0edeb9c002ace435d218522ff5a53ea37f\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:50.650519 containerd[1962]: time="2026-10-27T13:25:50.650452318Z" level=info msg="connecting to shim 59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd" address="unix:///run/containerd/s/45ad3ee3523322e0a38fff7bdef90f35d90f7d401a72da8eb28d7883fd4aaa8d" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:50.655495 sshd[10133]: Connection closed by invalid user openvpn 109.160.32.131 port 56376 [preauth] Oct 27 13:25:50.654000 audit[10133]: AUDIT1109 pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:25:50.657549 systemd[1]: sshd@52-4129-10.0.0.24:22-109.160.32.131:56376.service: Deactivated successfully. Oct 27 13:25:50.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4129-10.0.0.24:22-109.160.32.131:56376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:50.672307 systemd[1]: Started docker-59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd.scope - libcontainer container 59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd. Oct 27 13:25:50.683000 audit: BPF prog-id=478 op=LOAD Oct 27 13:25:50.684000 audit: BPF prog-id=479 op=LOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=559a05bb1f90 a2=98 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=479 op=UNLOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=480 op=LOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=559a05bb2268 a2=98 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=481 op=LOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=559a05bb1fa8 a2=98 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=481 op=UNLOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=480 op=UNLOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.684000 audit: BPF prog-id=482 op=LOAD Oct 27 13:25:50.684000 audit[10197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=559a05bb24b8 a2=98 a3=0 items=0 ppid=10185 pid=10197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35396338323762356334323935353738656231303662653935 Oct 27 13:25:50.701321 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:50.707940 kernel: docker0: port 1(veth0cc1a7d) entered blocking state Oct 27 13:25:50.708021 kernel: docker0: port 1(veth0cc1a7d) entered disabled state Oct 27 13:25:50.711324 kernel: veth0cc1a7d: entered allmulticast mode Oct 27 13:25:50.714129 kernel: veth0cc1a7d: entered promiscuous mode Oct 27 13:25:50.699000 audit: ANOM_PROMISCUOUS dev=veth0cc1a7d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:50.699000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e5a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.699000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:50.715000 audit[10219]: NETFILTER_CFG table=raw:213 family=2 entries=1 op=nft_register_rule pid=10219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:50.715000 audit[10219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffd2504f0 a2=0 a3=0 items=0 ppid=2508 pid=10219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:50.715000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:50.716879 systemd-networkd[1681]: veth0cc1a7d: Link UP Oct 27 13:25:50.732114 kernel: eth0: renamed from vethd940287 Oct 27 13:25:50.732207 kernel: docker0: port 1(veth0cc1a7d) entered blocking state Oct 27 13:25:50.738114 kernel: docker0: port 1(veth0cc1a7d) entered forwarding state Oct 27 13:25:50.738448 systemd-networkd[1681]: veth0cc1a7d: Gained carrier Oct 27 13:25:50.738684 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:51.766445 systemd[1]: docker-59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd.scope: Deactivated successfully. Oct 27 13:25:51.778455 containerd[1962]: time="2026-10-27T13:25:51.778415559Z" level=info msg="shim disconnected" id=59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd namespace=moby Oct 27 13:25:51.778455 containerd[1962]: time="2026-10-27T13:25:51.778444773Z" level=info msg="cleaning up after shim disconnected" id=59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd namespace=moby Oct 27 13:25:51.778455 containerd[1962]: time="2026-10-27T13:25:51.778452004Z" level=info msg="cleaning up dead shim" id=59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd namespace=moby Oct 27 13:25:51.779446 dockerd[2508]: time="2026-10-27T13:25:51.779407242Z" level=info msg="ignoring event" container=59c827b5c4295578eb106be950c1434a75ea003b17a6bd9b05d6694ee5334ddd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:51.800145 kernel: vethd940287: renamed from eth0 Oct 27 13:25:51.803906 systemd-networkd[1681]: veth0cc1a7d: Lost carrier Oct 27 13:25:51.804451 kernel: docker0: port 1(veth0cc1a7d) entered disabled state Oct 27 13:25:51.813000 audit[10249]: NETFILTER_CFG table=raw:214 family=2 entries=1 op=nft_unregister_rule pid=10249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:51.813000 audit[10249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2454f80 a2=0 a3=0 items=0 ppid=2508 pid=10249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:51.813000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:51.826133 systemd-networkd[1681]: veth0cc1a7d: Link DOWN Oct 27 13:25:51.831701 kernel: docker0: port 1(veth0cc1a7d) entered disabled state Oct 27 13:25:51.831759 kernel: veth0cc1a7d (unregistering): left allmulticast mode Oct 27 13:25:51.835112 kernel: veth0cc1a7d (unregistering): left promiscuous mode Oct 27 13:25:51.822000 audit: ANOM_PROMISCUOUS dev=veth0cc1a7d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:51.838901 kernel: docker0: port 1(veth0cc1a7d) entered disabled state Oct 27 13:25:51.822000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1520 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:51.822000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:51.849398 systemd[1]: run-docker-netns-330974e45597.mount: Deactivated successfully. Oct 27 13:25:51.851795 systemd[1]: var-lib-docker-overlay2-2da0f9a776593f3ace90548683853e0edeb9c002ace435d218522ff5a53ea37f-merged.mount: Deactivated successfully. Oct 27 13:25:51.863000 audit: BPF prog-id=478 op=UNLOAD Oct 27 13:25:51.863000 audit: BPF prog-id=482 op=UNLOAD Oct 27 13:25:51.923950 systemd[1]: var-lib-docker-overlay2-73bfe76aa8c6dd1b92e496cd3afdb14946c5fb8d39cabbda7c830e7e9a13374a\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:51.989599 containerd[1962]: time="2026-10-27T13:25:51.989560631Z" level=info msg="connecting to shim 22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c" address="unix:///run/containerd/s/b53d6287176102c3f0826758a49d1f258fd8b4be5bf51baea65fdc10f01e92f7" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:52.005250 systemd[1]: Started docker-22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c.scope - libcontainer container 22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c. Oct 27 13:25:52.012000 audit: BPF prog-id=483 op=LOAD Oct 27 13:25:52.012000 audit: BPF prog-id=484 op=LOAD Oct 27 13:25:52.012000 audit[10278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65a4141a9f90 a2=98 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.012000 audit: BPF prog-id=484 op=UNLOAD Oct 27 13:25:52.012000 audit[10278]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.013000 audit: BPF prog-id=485 op=LOAD Oct 27 13:25:52.013000 audit[10278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65a4141aa268 a2=98 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.013000 audit: BPF prog-id=486 op=LOAD Oct 27 13:25:52.013000 audit[10278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=65a4141a9fa8 a2=98 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.013000 audit: BPF prog-id=486 op=UNLOAD Oct 27 13:25:52.013000 audit[10278]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.013000 audit: BPF prog-id=485 op=UNLOAD Oct 27 13:25:52.013000 audit[10278]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.013000 audit: BPF prog-id=487 op=LOAD Oct 27 13:25:52.013000 audit[10278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65a4141aa4b8 a2=98 a3=0 items=0 ppid=10267 pid=10278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326263626163306331383964323866646531356332383361 Oct 27 13:25:52.033876 kernel: docker0: port 1(vethe8a21dd) entered blocking state Oct 27 13:25:52.033964 kernel: docker0: port 1(vethe8a21dd) entered disabled state Oct 27 13:25:52.033995 kernel: vethe8a21dd: entered allmulticast mode Oct 27 13:25:52.039123 kernel: vethe8a21dd: entered promiscuous mode Oct 27 13:25:52.024000 audit: ANOM_PROMISCUOUS dev=vethe8a21dd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:52.024000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121e570 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.024000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:52.040462 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:52.040000 audit[10298]: NETFILTER_CFG table=raw:215 family=2 entries=1 op=nft_register_rule pid=10298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:52.040000 audit[10298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4dd85e0 a2=0 a3=0 items=0 ppid=2508 pid=10298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:52.040000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:52.042533 systemd-networkd[1681]: vethe8a21dd: Link UP Oct 27 13:25:52.062161 kernel: eth0: renamed from vetha60bf18 Oct 27 13:25:52.062259 kernel: docker0: port 1(vethe8a21dd) entered blocking state Oct 27 13:25:52.062276 kernel: docker0: port 1(vethe8a21dd) entered forwarding state Oct 27 13:25:52.063938 systemd-networkd[1681]: vethe8a21dd: Gained carrier Oct 27 13:25:52.064155 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:53.092572 systemd[1]: docker-22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c.scope: Deactivated successfully. Oct 27 13:25:53.105133 containerd[1962]: time="2026-10-27T13:25:53.105088753Z" level=info msg="shim disconnected" id=22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c namespace=moby Oct 27 13:25:53.105133 containerd[1962]: time="2026-10-27T13:25:53.105129831Z" level=info msg="cleaning up after shim disconnected" id=22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c namespace=moby Oct 27 13:25:53.105469 containerd[1962]: time="2026-10-27T13:25:53.105139318Z" level=info msg="cleaning up dead shim" id=22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c namespace=moby Oct 27 13:25:53.106449 dockerd[2508]: time="2026-10-27T13:25:53.106407529Z" level=info msg="ignoring event" container=22bcbac0c189d28fde15c283aeadb77012d766202dd78defce96e047f31af70c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:53.125836 systemd-networkd[1681]: vethe8a21dd: Lost carrier Oct 27 13:25:53.128421 kernel: docker0: port 1(vethe8a21dd) entered disabled state Oct 27 13:25:53.128453 kernel: vetha60bf18: renamed from eth0 Oct 27 13:25:53.143000 audit[10330]: NETFILTER_CFG table=raw:216 family=2 entries=1 op=nft_unregister_rule pid=10330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:53.143000 audit[10330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe60a4580 a2=0 a3=0 items=0 ppid=2508 pid=10330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.143000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:53.149543 systemd-networkd[1681]: vethe8a21dd: Link DOWN Oct 27 13:25:53.157153 kernel: docker0: port 1(vethe8a21dd) entered disabled state Oct 27 13:25:53.157225 kernel: vethe8a21dd (unregistering): left allmulticast mode Oct 27 13:25:53.161259 kernel: vethe8a21dd (unregistering): left promiscuous mode Oct 27 13:25:53.148000 audit: ANOM_PROMISCUOUS dev=vethe8a21dd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:53.165387 kernel: docker0: port 1(vethe8a21dd) entered disabled state Oct 27 13:25:53.148000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774c40 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.148000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:53.180757 systemd[1]: run-docker-netns-f73e08f384be.mount: Deactivated successfully. Oct 27 13:25:53.184672 systemd[1]: var-lib-docker-overlay2-73bfe76aa8c6dd1b92e496cd3afdb14946c5fb8d39cabbda7c830e7e9a13374a-merged.mount: Deactivated successfully. Oct 27 13:25:53.196000 audit: BPF prog-id=483 op=UNLOAD Oct 27 13:25:53.196000 audit: BPF prog-id=487 op=UNLOAD Oct 27 13:25:53.268481 systemd[1]: var-lib-docker-overlay2-6a3f902678974325bdbd07c6bcc1ea26191ecfa03e6e5967f297b2ad14a9935d\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:53.337571 containerd[1962]: time="2026-10-27T13:25:53.337520070Z" level=info msg="connecting to shim c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f" address="unix:///run/containerd/s/db294fd2959b7d93555cdeb780366882b9db2bbbe4098de64c7df66515d02d2a" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:53.355265 systemd[1]: Started docker-c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f.scope - libcontainer container c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f. Oct 27 13:25:53.362000 audit: BPF prog-id=488 op=LOAD Oct 27 13:25:53.362000 audit: BPF prog-id=489 op=LOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=59773f8a9f90 a2=98 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=489 op=UNLOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=490 op=LOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=59773f8aa268 a2=98 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=491 op=LOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=59773f8a9fa8 a2=98 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=491 op=UNLOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=490 op=UNLOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.362000 audit: BPF prog-id=492 op=LOAD Oct 27 13:25:53.362000 audit[10357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=59773f8aa4b8 a2=98 a3=0 items=0 ppid=10347 pid=10357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343337393863366630626634353435636436313163646538 Oct 27 13:25:53.378060 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:53.385328 kernel: docker0: port 1(veth4cb377d) entered blocking state Oct 27 13:25:53.385410 kernel: docker0: port 1(veth4cb377d) entered disabled state Oct 27 13:25:53.388379 kernel: veth4cb377d: entered allmulticast mode Oct 27 13:25:53.391454 kernel: veth4cb377d: entered promiscuous mode Oct 27 13:25:53.377000 audit: ANOM_PROMISCUOUS dev=veth4cb377d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:53.377000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046420 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.377000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:53.392000 audit[10380]: NETFILTER_CFG table=raw:217 family=2 entries=1 op=nft_register_rule pid=10380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:53.392000 audit[10380]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdcdb6500 a2=0 a3=0 items=0 ppid=2508 pid=10380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:53.392000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:53.394312 systemd-networkd[1681]: veth4cb377d: Link UP Oct 27 13:25:53.409122 kernel: eth0: renamed from vethfafbbda Oct 27 13:25:53.416776 kernel: docker0: port 1(veth4cb377d) entered blocking state Oct 27 13:25:53.416841 kernel: docker0: port 1(veth4cb377d) entered forwarding state Oct 27 13:25:53.417005 systemd-networkd[1681]: veth4cb377d: Gained carrier Oct 27 13:25:53.417581 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:54.445204 systemd[1]: docker-c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f.scope: Deactivated successfully. Oct 27 13:25:54.457701 containerd[1962]: time="2026-10-27T13:25:54.457665594Z" level=info msg="shim disconnected" id=c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f namespace=moby Oct 27 13:25:54.458770 containerd[1962]: time="2026-10-27T13:25:54.458148053Z" level=info msg="cleaning up after shim disconnected" id=c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f namespace=moby Oct 27 13:25:54.458770 containerd[1962]: time="2026-10-27T13:25:54.458171539Z" level=info msg="cleaning up dead shim" id=c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f namespace=moby Oct 27 13:25:54.458876 dockerd[2508]: time="2026-10-27T13:25:54.458209593Z" level=info msg="ignoring event" container=c43798c6f0bf4545cd611cde8cd5859b7cfa7a5776a97fc811b4ca22ab754b6f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:54.482070 kernel: vethfafbbda: renamed from eth0 Oct 27 13:25:54.482180 kernel: docker0: port 1(veth4cb377d) entered disabled state Oct 27 13:25:54.482358 systemd-networkd[1681]: veth4cb377d: Lost carrier Oct 27 13:25:54.494000 audit[10411]: NETFILTER_CFG table=raw:218 family=2 entries=1 op=nft_unregister_rule pid=10411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:54.500111 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:25:54.500211 kernel: audit: type=1325 audit(1793107554.494:1699): table=raw:218 family=2 entries=1 op=nft_unregister_rule pid=10411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:54.494000 audit[10411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffffa289e0 a2=0 a3=0 items=0 ppid=2508 pid=10411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.525604 kernel: audit: type=1300 audit(1793107554.494:1699): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffffa289e0 a2=0 a3=0 items=0 ppid=2508 pid=10411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.494000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:54.526430 systemd-networkd[1681]: veth4cb377d: Link DOWN Oct 27 13:25:54.538344 kernel: audit: type=1327 audit(1793107554.494:1699): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:54.538377 kernel: docker0: port 1(veth4cb377d) entered disabled state Oct 27 13:25:54.548305 kernel: veth4cb377d (unregistering): left allmulticast mode Oct 27 13:25:54.548371 kernel: veth4cb377d (unregistering): left promiscuous mode Oct 27 13:25:54.507000 audit: ANOM_PROMISCUOUS dev=veth4cb377d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:54.553242 kernel: docker0: port 1(veth4cb377d) entered disabled state Oct 27 13:25:54.553267 kernel: audit: type=1700 audit(1793107554.507:1700): dev=veth4cb377d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:54.507000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159a920 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.507000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:54.588001 systemd[1]: run-docker-netns-ef11e1b2293b.mount: Deactivated successfully. Oct 27 13:25:54.600790 kernel: audit: type=1300 audit(1793107554.507:1700): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159a920 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.600883 kernel: audit: type=1327 audit(1793107554.507:1700): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:54.606402 systemd[1]: var-lib-docker-overlay2-6a3f902678974325bdbd07c6bcc1ea26191ecfa03e6e5967f297b2ad14a9935d-merged.mount: Deactivated successfully. Oct 27 13:25:54.611000 audit: BPF prog-id=488 op=UNLOAD Oct 27 13:25:54.611000 audit: BPF prog-id=492 op=UNLOAD Oct 27 13:25:54.623435 kernel: audit: type=1334 audit(1793107554.611:1701): prog-id=488 op=UNLOAD Oct 27 13:25:54.623497 kernel: audit: type=1334 audit(1793107554.611:1702): prog-id=492 op=UNLOAD Oct 27 13:25:54.731483 containerd[1962]: time="2026-10-27T13:25:54.731259504Z" level=info msg="connecting to shim d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27" address="unix:///run/containerd/s/93eb43616fe8cca52290e952c296f1a534a56fa6021e96b83ff32bc80c9d6e32" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:54.753262 systemd[1]: Started docker-d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27.scope - libcontainer container d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27. Oct 27 13:25:54.760000 audit: BPF prog-id=493 op=LOAD Oct 27 13:25:54.764000 audit: BPF prog-id=494 op=LOAD Oct 27 13:25:54.769617 kernel: audit: type=1334 audit(1793107554.760:1703): prog-id=493 op=LOAD Oct 27 13:25:54.769691 kernel: audit: type=1334 audit(1793107554.764:1704): prog-id=494 op=LOAD Oct 27 13:25:54.764000 audit[10438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79c0e27adf90 a2=98 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.764000 audit: BPF prog-id=494 op=UNLOAD Oct 27 13:25:54.764000 audit[10438]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.764000 audit: BPF prog-id=495 op=LOAD Oct 27 13:25:54.764000 audit[10438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79c0e27ae268 a2=98 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.769000 audit: BPF prog-id=496 op=LOAD Oct 27 13:25:54.769000 audit[10438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=79c0e27adfa8 a2=98 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.769000 audit: BPF prog-id=496 op=UNLOAD Oct 27 13:25:54.769000 audit[10438]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.769000 audit: BPF prog-id=495 op=UNLOAD Oct 27 13:25:54.769000 audit[10438]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.769000 audit: BPF prog-id=497 op=LOAD Oct 27 13:25:54.769000 audit[10438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79c0e27ae4b8 a2=98 a3=0 items=0 ppid=10427 pid=10438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64316339316630386665613965353062306432343237316435 Oct 27 13:25:54.788704 kernel: docker0: port 1(vethd7ef971) entered blocking state Oct 27 13:25:54.788781 kernel: docker0: port 1(vethd7ef971) entered disabled state Oct 27 13:25:54.791367 kernel: vethd7ef971: entered allmulticast mode Oct 27 13:25:54.794306 kernel: vethd7ef971: entered promiscuous mode Oct 27 13:25:54.780000 audit: ANOM_PROMISCUOUS dev=vethd7ef971 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:54.780000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332360 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.780000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:54.795214 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:54.797000 audit[10459]: NETFILTER_CFG table=raw:219 family=2 entries=1 op=nft_register_rule pid=10459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:54.797000 audit[10459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffea47f4f0 a2=0 a3=0 items=0 ppid=2508 pid=10459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:54.797000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:54.799043 systemd-networkd[1681]: vethd7ef971: Link UP Oct 27 13:25:54.815115 kernel: eth0: renamed from veth70798c4 Oct 27 13:25:54.815207 kernel: docker0: port 1(vethd7ef971) entered blocking state Oct 27 13:25:54.815230 kernel: docker0: port 1(vethd7ef971) entered forwarding state Oct 27 13:25:54.818832 systemd-networkd[1681]: vethd7ef971: Gained carrier Oct 27 13:25:54.819076 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:55.844704 systemd[1]: docker-d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27.scope: Deactivated successfully. Oct 27 13:25:55.855820 containerd[1962]: time="2026-10-27T13:25:55.855702086Z" level=info msg="shim disconnected" id=d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27 namespace=moby Oct 27 13:25:55.855820 containerd[1962]: time="2026-10-27T13:25:55.855731692Z" level=info msg="cleaning up after shim disconnected" id=d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27 namespace=moby Oct 27 13:25:55.855820 containerd[1962]: time="2026-10-27T13:25:55.855737996Z" level=info msg="cleaning up dead shim" id=d1c91f08fea9e50b0d24271d53f6718e839e0348bf4e80df4a15b2bd30c73c27 namespace=moby Oct 27 13:25:55.878109 kernel: veth70798c4: renamed from eth0 Oct 27 13:25:55.878242 kernel: docker0: port 1(vethd7ef971) entered disabled state Oct 27 13:25:55.879827 systemd-networkd[1681]: vethd7ef971: Lost carrier Oct 27 13:25:55.891000 audit[10490]: NETFILTER_CFG table=raw:220 family=2 entries=1 op=nft_unregister_rule pid=10490 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:55.891000 audit[10490]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd8d3d500 a2=0 a3=0 items=0 ppid=2508 pid=10490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:55.891000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:55.897536 systemd-networkd[1681]: vethd7ef971: Link DOWN Oct 27 13:25:55.904945 kernel: docker0: port 1(vethd7ef971) entered disabled state Oct 27 13:25:55.905013 kernel: vethd7ef971 (unregistering): left allmulticast mode Oct 27 13:25:55.908424 kernel: vethd7ef971 (unregistering): left promiscuous mode Oct 27 13:25:55.896000 audit: ANOM_PROMISCUOUS dev=vethd7ef971 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:55.912269 kernel: docker0: port 1(vethd7ef971) entered disabled state Oct 27 13:25:55.896000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce100 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:55.896000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:55.925472 systemd[1]: run-docker-netns-466812848f5e.mount: Deactivated successfully. Oct 27 13:25:55.928530 systemd[1]: var-lib-docker-overlay2-3de768c63efc08c854029186945399463629a3ad4e76added893625e2c2b9c48-merged.mount: Deactivated successfully. Oct 27 13:25:55.937000 audit: BPF prog-id=493 op=UNLOAD Oct 27 13:25:55.937000 audit: BPF prog-id=497 op=UNLOAD Oct 27 13:25:56.016657 systemd[1]: var-lib-docker-overlay2-f8d792e205cd9977419318a292f6fe03e1179501f76f3fbcd47fca9f75d37bbc\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:56.087294 containerd[1962]: time="2026-10-27T13:25:56.087234378Z" level=info msg="connecting to shim cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579" address="unix:///run/containerd/s/78d78099eb065a897480f5188f434bbeee5bc20ba3be3cf907ea8f39946755d8" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:56.111297 systemd[1]: Started docker-cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579.scope - libcontainer container cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579. Oct 27 13:25:56.119000 audit: BPF prog-id=498 op=LOAD Oct 27 13:25:56.120000 audit: BPF prog-id=499 op=LOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7caf77ebbf90 a2=98 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=499 op=UNLOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=500 op=LOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7caf77ebc268 a2=98 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=501 op=LOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=7caf77ebbfa8 a2=98 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=501 op=UNLOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=500 op=UNLOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.120000 audit: BPF prog-id=502 op=LOAD Oct 27 13:25:56.120000 audit[10518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7caf77ebc4b8 a2=98 a3=0 items=0 ppid=10507 pid=10518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63646465383030316264623132636164623831393830373934 Oct 27 13:25:56.141026 kernel: docker0: port 1(veth7974141) entered blocking state Oct 27 13:25:56.141130 kernel: docker0: port 1(veth7974141) entered disabled state Oct 27 13:25:56.143911 kernel: veth7974141: entered allmulticast mode Oct 27 13:25:56.132000 audit: ANOM_PROMISCUOUS dev=veth7974141 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:56.132000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b6570 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.132000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:56.147331 kernel: veth7974141: entered promiscuous mode Oct 27 13:25:56.147797 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:56.149000 audit[10539]: NETFILTER_CFG table=raw:221 family=2 entries=1 op=nft_register_rule pid=10539 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:56.149000 audit[10539]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffff3826d0 a2=0 a3=0 items=0 ppid=2508 pid=10539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:56.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:56.151943 systemd-networkd[1681]: veth7974141: Link UP Oct 27 13:25:56.167129 kernel: eth0: renamed from veth36892c9 Oct 27 13:25:56.174665 kernel: docker0: port 1(veth7974141) entered blocking state Oct 27 13:25:56.174739 kernel: docker0: port 1(veth7974141) entered forwarding state Oct 27 13:25:56.175048 systemd-networkd[1681]: veth7974141: Gained carrier Oct 27 13:25:56.176041 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:57.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-4130-10.0.0.24:22-109.160.32.131:47146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:25:57.073093 systemd[1]: Started sshd@53-4130-10.0.0.24:22-109.160.32.131:47146.service - OpenSSH per-connection server daemon (109.160.32.131:47146). Oct 27 13:25:57.198927 systemd[1]: docker-cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579.scope: Deactivated successfully. Oct 27 13:25:57.210493 dockerd[2508]: time="2026-10-27T13:25:57.210448348Z" level=info msg="ignoring event" container=cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:57.210942 containerd[1962]: time="2026-10-27T13:25:57.210865427Z" level=info msg="shim disconnected" id=cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579 namespace=moby Oct 27 13:25:57.210942 containerd[1962]: time="2026-10-27T13:25:57.210901864Z" level=info msg="cleaning up after shim disconnected" id=cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579 namespace=moby Oct 27 13:25:57.210942 containerd[1962]: time="2026-10-27T13:25:57.210908384Z" level=info msg="cleaning up dead shim" id=cdde8001bdb12cadb81980794e23dd696e1e555dc217d0e15b41f94fe0326579 namespace=moby Oct 27 13:25:57.231734 systemd-networkd[1681]: veth7974141: Lost carrier Oct 27 13:25:57.232343 kernel: docker0: port 1(veth7974141) entered disabled state Oct 27 13:25:57.235118 kernel: veth36892c9: renamed from eth0 Oct 27 13:25:57.250000 audit[10575]: NETFILTER_CFG table=raw:222 family=2 entries=1 op=nft_unregister_rule pid=10575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:57.250000 audit[10575]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffefb6340 a2=0 a3=0 items=0 ppid=2508 pid=10575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.250000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:57.257557 systemd-networkd[1681]: veth7974141: Link DOWN Oct 27 13:25:57.264855 kernel: docker0: port 1(veth7974141) entered disabled state Oct 27 13:25:57.264921 kernel: veth7974141 (unregistering): left allmulticast mode Oct 27 13:25:57.268435 kernel: veth7974141 (unregistering): left promiscuous mode Oct 27 13:25:57.256000 audit: ANOM_PROMISCUOUS dev=veth7974141 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:57.272193 kernel: docker0: port 1(veth7974141) entered disabled state Oct 27 13:25:57.256000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ceac0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.256000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:57.284184 systemd[1]: run-docker-netns-1727a420b164.mount: Deactivated successfully. Oct 27 13:25:57.287467 systemd[1]: var-lib-docker-overlay2-f8d792e205cd9977419318a292f6fe03e1179501f76f3fbcd47fca9f75d37bbc-merged.mount: Deactivated successfully. Oct 27 13:25:57.296000 audit: BPF prog-id=498 op=UNLOAD Oct 27 13:25:57.296000 audit: BPF prog-id=502 op=UNLOAD Oct 27 13:25:57.438942 containerd[1962]: time="2026-10-27T13:25:57.438896505Z" level=info msg="connecting to shim e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62" address="unix:///run/containerd/s/9b32c6d1f4752a6f710ca14766a711bc36c390499a672e149bc07616e1a62665" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:57.460269 systemd[1]: Started docker-e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62.scope - libcontainer container e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62. Oct 27 13:25:57.468000 audit: BPF prog-id=503 op=LOAD Oct 27 13:25:57.468000 audit: BPF prog-id=504 op=LOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=205f653a1f90 a2=98 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=504 op=UNLOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=505 op=LOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=205f653a2268 a2=98 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=506 op=LOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=205f653a1fa8 a2=98 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=506 op=UNLOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=505 op=UNLOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.468000 audit: BPF prog-id=507 op=LOAD Oct 27 13:25:57.468000 audit[10605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=205f653a24b8 a2=98 a3=0 items=0 ppid=10594 pid=10605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65336133656130653831376534656266393536633033323533 Oct 27 13:25:57.483756 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:57.492308 kernel: docker0: port 1(vethff56dd4) entered blocking state Oct 27 13:25:57.492405 kernel: docker0: port 1(vethff56dd4) entered disabled state Oct 27 13:25:57.496000 kernel: vethff56dd4: entered allmulticast mode Oct 27 13:25:57.498640 kernel: vethff56dd4: entered promiscuous mode Oct 27 13:25:57.482000 audit: ANOM_PROMISCUOUS dev=vethff56dd4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:57.482000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1472480 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.482000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:57.500000 audit[10628]: NETFILTER_CFG table=raw:223 family=2 entries=1 op=nft_register_rule pid=10628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:57.500000 audit[10628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe396fbb0 a2=0 a3=0 items=0 ppid=2508 pid=10628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:57.500000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:57.501603 systemd-networkd[1681]: vethff56dd4: Link UP Oct 27 13:25:57.514231 kernel: eth0: renamed from vethe9fc352 Oct 27 13:25:57.521033 kernel: docker0: port 1(vethff56dd4) entered blocking state Oct 27 13:25:57.521080 kernel: docker0: port 1(vethff56dd4) entered forwarding state Oct 27 13:25:57.521870 systemd-networkd[1681]: vethff56dd4: Gained carrier Oct 27 13:25:57.522113 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:58.547254 systemd[1]: docker-e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62.scope: Deactivated successfully. Oct 27 13:25:58.561254 containerd[1962]: time="2026-10-27T13:25:58.561212753Z" level=info msg="shim disconnected" id=e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62 namespace=moby Oct 27 13:25:58.561254 containerd[1962]: time="2026-10-27T13:25:58.561248263Z" level=info msg="cleaning up after shim disconnected" id=e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62 namespace=moby Oct 27 13:25:58.561254 containerd[1962]: time="2026-10-27T13:25:58.561254231Z" level=info msg="cleaning up dead shim" id=e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62 namespace=moby Oct 27 13:25:58.561607 dockerd[2508]: time="2026-10-27T13:25:58.561396582Z" level=info msg="ignoring event" container=e3a3ea0e817e4ebf956c03253206580a196e492856c71f83797a0a2e9c2b6b62 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:58.582019 systemd-networkd[1681]: vethff56dd4: Lost carrier Oct 27 13:25:58.584439 kernel: docker0: port 1(vethff56dd4) entered disabled state Oct 27 13:25:58.584490 kernel: vethe9fc352: renamed from eth0 Oct 27 13:25:58.599000 audit[10659]: NETFILTER_CFG table=raw:224 family=2 entries=1 op=nft_unregister_rule pid=10659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:58.599000 audit[10659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcdd01e30 a2=0 a3=0 items=0 ppid=2508 pid=10659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.599000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:58.607540 systemd-networkd[1681]: vethff56dd4: Link DOWN Oct 27 13:25:58.611454 kernel: docker0: port 1(vethff56dd4) entered disabled state Oct 27 13:25:58.611518 kernel: vethff56dd4 (unregistering): left allmulticast mode Oct 27 13:25:58.617906 kernel: vethff56dd4 (unregistering): left promiscuous mode Oct 27 13:25:58.606000 audit: ANOM_PROMISCUOUS dev=vethff56dd4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:58.621377 kernel: docker0: port 1(vethff56dd4) entered disabled state Oct 27 13:25:58.606000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3740 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.606000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:58.633033 systemd[1]: run-docker-netns-cdbd21cc3665.mount: Deactivated successfully. Oct 27 13:25:58.635867 systemd[1]: var-lib-docker-overlay2-07e48ae76eddadae4fbcbf7725ef25ae40f9262c9131f13a1f6d18bc870ae158-merged.mount: Deactivated successfully. Oct 27 13:25:58.644000 audit: BPF prog-id=503 op=UNLOAD Oct 27 13:25:58.644000 audit: BPF prog-id=507 op=UNLOAD Oct 27 13:25:58.718479 systemd[1]: var-lib-docker-overlay2-ff7d680d5e4a4e2154a589c82c39f479919eb660bd9e9d99cd44e13d9d42a4c3\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:25:58.788627 containerd[1962]: time="2026-10-27T13:25:58.788583424Z" level=info msg="connecting to shim 0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29" address="unix:///run/containerd/s/88ad5feeb807fe6cce91919938dffeafefc45641e94f65f255254d967d55dbf2" namespace=moby protocol=ttrpc version=3 Oct 27 13:25:58.810251 systemd[1]: Started docker-0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29.scope - libcontainer container 0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29. Oct 27 13:25:58.819000 audit: BPF prog-id=508 op=LOAD Oct 27 13:25:58.819000 audit: BPF prog-id=509 op=LOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=16bb3989bf90 a2=98 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=509 op=UNLOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=510 op=LOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=16bb3989c268 a2=98 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=511 op=LOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=16bb3989bfa8 a2=98 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=511 op=UNLOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=510 op=UNLOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.819000 audit: BPF prog-id=512 op=LOAD Oct 27 13:25:58.819000 audit[10688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=16bb3989c4b8 a2=98 a3=0 items=0 ppid=10677 pid=10688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30656138346663616236323933636430343935643737633666 Oct 27 13:25:58.840256 kernel: docker0: port 1(veth7eb2a3b) entered blocking state Oct 27 13:25:58.840341 kernel: docker0: port 1(veth7eb2a3b) entered disabled state Oct 27 13:25:58.843262 kernel: veth7eb2a3b: entered allmulticast mode Oct 27 13:25:58.846287 kernel: veth7eb2a3b: entered promiscuous mode Oct 27 13:25:58.831000 audit: ANOM_PROMISCUOUS dev=veth7eb2a3b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:58.831000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c65cb0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.831000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:25:58.847882 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:25:58.849000 audit[10709]: NETFILTER_CFG table=raw:225 family=2 entries=1 op=nft_register_rule pid=10709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:58.849000 audit[10709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff0898450 a2=0 a3=0 items=0 ppid=2508 pid=10709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:58.849000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:58.850836 systemd-networkd[1681]: veth7eb2a3b: Link UP Oct 27 13:25:58.873729 kernel: eth0: renamed from vethfea2459 Oct 27 13:25:58.873821 kernel: docker0: port 1(veth7eb2a3b) entered blocking state Oct 27 13:25:58.873750 systemd-networkd[1681]: veth7eb2a3b: Gained carrier Oct 27 13:25:58.873908 kernel: docker0: port 1(veth7eb2a3b) entered forwarding state Oct 27 13:25:58.874455 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:25:59.897730 systemd[1]: docker-0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29.scope: Deactivated successfully. Oct 27 13:25:59.909073 dockerd[2508]: time="2026-10-27T13:25:59.909022121Z" level=info msg="ignoring event" container=0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:25:59.909807 containerd[1962]: time="2026-10-27T13:25:59.909664130Z" level=info msg="shim disconnected" id=0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29 namespace=moby Oct 27 13:25:59.909807 containerd[1962]: time="2026-10-27T13:25:59.909696568Z" level=info msg="cleaning up after shim disconnected" id=0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29 namespace=moby Oct 27 13:25:59.909807 containerd[1962]: time="2026-10-27T13:25:59.909703688Z" level=info msg="cleaning up dead shim" id=0ea84fcab6293cd0495d77c6febfe41b37ff0906f2fdcaf35b6007a0c0903a29 namespace=moby Oct 27 13:25:59.932419 systemd-networkd[1681]: veth7eb2a3b: Lost carrier Oct 27 13:25:59.935161 kernel: docker0: port 1(veth7eb2a3b) entered disabled state Oct 27 13:25:59.935223 kernel: vethfea2459: renamed from eth0 Oct 27 13:25:59.945000 audit[10743]: NETFILTER_CFG table=raw:226 family=2 entries=1 op=nft_unregister_rule pid=10743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:59.949625 kernel: kauditd_printk_skb: 135 callbacks suppressed Oct 27 13:25:59.949706 kernel: audit: type=1325 audit(1793107559.945:1756): table=raw:226 family=2 entries=1 op=nft_unregister_rule pid=10743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:25:59.945000 audit[10743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdca3f190 a2=0 a3=0 items=0 ppid=2508 pid=10743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:59.975022 kernel: audit: type=1300 audit(1793107559.945:1756): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdca3f190 a2=0 a3=0 items=0 ppid=2508 pid=10743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:59.945000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:59.975762 systemd-networkd[1681]: veth7eb2a3b: Link DOWN Oct 27 13:25:59.987308 kernel: audit: type=1327 audit(1793107559.945:1756): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:25:59.987339 kernel: docker0: port 1(veth7eb2a3b) entered disabled state Oct 27 13:25:59.998130 kernel: veth7eb2a3b (unregistering): left allmulticast mode Oct 27 13:25:59.998209 kernel: veth7eb2a3b (unregistering): left promiscuous mode Oct 27 13:25:59.957000 audit: ANOM_PROMISCUOUS dev=veth7eb2a3b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:00.002238 kernel: docker0: port 1(veth7eb2a3b) entered disabled state Oct 27 13:26:00.002262 kernel: audit: type=1700 audit(1793107559.957:1757): dev=veth7eb2a3b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:25:59.957000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1052620 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:25:59.957000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:00.048356 kernel: audit: type=1300 audit(1793107559.957:1757): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1052620 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.048430 kernel: audit: type=1327 audit(1793107559.957:1757): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:00.050031 systemd[1]: run-docker-netns-f4f606f3cae2.mount: Deactivated successfully. Oct 27 13:26:00.054614 systemd[1]: var-lib-docker-overlay2-ff7d680d5e4a4e2154a589c82c39f479919eb660bd9e9d99cd44e13d9d42a4c3-merged.mount: Deactivated successfully. Oct 27 13:26:00.061000 audit: BPF prog-id=508 op=UNLOAD Oct 27 13:26:00.061000 audit: BPF prog-id=512 op=UNLOAD Oct 27 13:26:00.070754 kernel: audit: type=1334 audit(1793107560.061:1758): prog-id=508 op=UNLOAD Oct 27 13:26:00.070825 kernel: audit: type=1334 audit(1793107560.061:1759): prog-id=512 op=UNLOAD Oct 27 13:26:00.145217 systemd[1]: var-lib-docker-overlay2-bfb99aa5b549a3a8f5626ead1d4b8770904b5cbb74545787a7faceb1bcb32719\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:00.208975 containerd[1962]: time="2026-10-27T13:26:00.208529846Z" level=info msg="connecting to shim 35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763" address="unix:///run/containerd/s/a15cde397243817d5ff1de825dfbc1b53a4f18b1a42288321edf8336cf0ca1ca" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:00.229252 systemd[1]: Started docker-35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763.scope - libcontainer container 35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763. Oct 27 13:26:00.236000 audit: BPF prog-id=513 op=LOAD Oct 27 13:26:00.236000 audit: BPF prog-id=514 op=LOAD Oct 27 13:26:00.246003 kernel: audit: type=1334 audit(1793107560.236:1760): prog-id=513 op=LOAD Oct 27 13:26:00.246052 kernel: audit: type=1334 audit(1793107560.236:1761): prog-id=514 op=LOAD Oct 27 13:26:00.236000 audit[10772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e08b8b7bf90 a2=98 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.241000 audit: BPF prog-id=514 op=UNLOAD Oct 27 13:26:00.241000 audit[10772]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.241000 audit: BPF prog-id=515 op=LOAD Oct 27 13:26:00.241000 audit[10772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e08b8b7c268 a2=98 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.241000 audit: BPF prog-id=516 op=LOAD Oct 27 13:26:00.241000 audit[10772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3e08b8b7bfa8 a2=98 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.245000 audit: BPF prog-id=516 op=UNLOAD Oct 27 13:26:00.245000 audit[10772]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.245000 audit: BPF prog-id=515 op=UNLOAD Oct 27 13:26:00.245000 audit[10772]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.245000 audit: BPF prog-id=517 op=LOAD Oct 27 13:26:00.245000 audit[10772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e08b8b7c4b8 a2=98 a3=0 items=0 ppid=10761 pid=10772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356466316464383538643233643163303031386533336161 Oct 27 13:26:00.263242 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:00.268283 kernel: docker0: port 1(veth921d3f1) entered blocking state Oct 27 13:26:00.268351 kernel: docker0: port 1(veth921d3f1) entered disabled state Oct 27 13:26:00.271267 kernel: veth921d3f1: entered allmulticast mode Oct 27 13:26:00.274137 kernel: veth921d3f1: entered promiscuous mode Oct 27 13:26:00.259000 audit: ANOM_PROMISCUOUS dev=veth921d3f1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:00.259000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c14731a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:00.275000 audit[10793]: NETFILTER_CFG table=raw:227 family=2 entries=1 op=nft_register_rule pid=10793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:00.275000 audit[10793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8b00ee0 a2=0 a3=0 items=0 ppid=2508 pid=10793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:00.275000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:00.278090 systemd-networkd[1681]: veth921d3f1: Link UP Oct 27 13:26:00.293116 kernel: eth0: renamed from veth6321204 Oct 27 13:26:00.293184 kernel: docker0: port 1(veth921d3f1) entered blocking state Oct 27 13:26:00.299859 kernel: docker0: port 1(veth921d3f1) entered forwarding state Oct 27 13:26:00.300226 systemd-networkd[1681]: veth921d3f1: Gained carrier Oct 27 13:26:00.301131 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:01.327911 systemd[1]: docker-35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763.scope: Deactivated successfully. Oct 27 13:26:01.342075 dockerd[2508]: time="2026-10-27T13:26:01.342029315Z" level=info msg="ignoring event" container=35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:01.342386 containerd[1962]: time="2026-10-27T13:26:01.342316345Z" level=info msg="shim disconnected" id=35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763 namespace=moby Oct 27 13:26:01.342386 containerd[1962]: time="2026-10-27T13:26:01.342347703Z" level=info msg="cleaning up after shim disconnected" id=35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763 namespace=moby Oct 27 13:26:01.342386 containerd[1962]: time="2026-10-27T13:26:01.342353503Z" level=info msg="cleaning up dead shim" id=35df1dd858d23d1c0018e33aa4681c39c7cc871a50b20f659321ec7204f80763 namespace=moby Oct 27 13:26:01.363761 systemd-networkd[1681]: veth921d3f1: Lost carrier Oct 27 13:26:01.366666 kernel: docker0: port 1(veth921d3f1) entered disabled state Oct 27 13:26:01.366708 kernel: veth6321204: renamed from eth0 Oct 27 13:26:01.382000 audit[10824]: NETFILTER_CFG table=raw:228 family=2 entries=1 op=nft_unregister_rule pid=10824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:01.382000 audit[10824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffce23f700 a2=0 a3=0 items=0 ppid=2508 pid=10824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.382000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:01.390581 systemd-networkd[1681]: veth921d3f1: Link DOWN Oct 27 13:26:01.398409 kernel: docker0: port 1(veth921d3f1) entered disabled state Oct 27 13:26:01.398479 kernel: veth921d3f1 (unregistering): left allmulticast mode Oct 27 13:26:01.401895 kernel: veth921d3f1 (unregistering): left promiscuous mode Oct 27 13:26:01.389000 audit: ANOM_PROMISCUOUS dev=veth921d3f1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:01.406614 kernel: docker0: port 1(veth921d3f1) entered disabled state Oct 27 13:26:01.389000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0aa0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.389000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:01.414200 systemd[1]: run-docker-netns-db4b0d95868f.mount: Deactivated successfully. Oct 27 13:26:01.417150 systemd[1]: var-lib-docker-overlay2-bfb99aa5b549a3a8f5626ead1d4b8770904b5cbb74545787a7faceb1bcb32719-merged.mount: Deactivated successfully. Oct 27 13:26:01.432000 audit: BPF prog-id=513 op=UNLOAD Oct 27 13:26:01.432000 audit: BPF prog-id=517 op=UNLOAD Oct 27 13:26:01.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-21-10.0.0.24:22-109.160.32.131:57986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:01.538712 systemd[1]: Started sshd@54-21-10.0.0.24:22-109.160.32.131:57986.service - OpenSSH per-connection server daemon (109.160.32.131:57986). Oct 27 13:26:01.603291 containerd[1962]: time="2026-10-27T13:26:01.603178805Z" level=info msg="connecting to shim 6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e" address="unix:///run/containerd/s/94f957fd5488c3e389b2ac58bf3ccd4179e23644060b06107ac9ba9afe65695e" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:01.626282 systemd[1]: Started docker-6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e.scope - libcontainer container 6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e. Oct 27 13:26:01.634000 audit: BPF prog-id=518 op=LOAD Oct 27 13:26:01.635000 audit: BPF prog-id=519 op=LOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=548aab749f90 a2=98 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=519 op=UNLOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=520 op=LOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=548aab74a268 a2=98 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=521 op=LOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=548aab749fa8 a2=98 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=521 op=UNLOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=520 op=UNLOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.635000 audit: BPF prog-id=522 op=LOAD Oct 27 13:26:01.635000 audit[10856]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=548aab74a4b8 a2=98 a3=0 items=0 ppid=10845 pid=10856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36636666663038636664363039343066303937363631643236 Oct 27 13:26:01.649893 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:01.657799 kernel: docker0: port 1(veth9a49c82) entered blocking state Oct 27 13:26:01.657883 kernel: docker0: port 1(veth9a49c82) entered disabled state Oct 27 13:26:01.660873 kernel: veth9a49c82: entered allmulticast mode Oct 27 13:26:01.648000 audit: ANOM_PROMISCUOUS dev=veth9a49c82 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:01.648000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0b9b500 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.648000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:01.665118 kernel: veth9a49c82: entered promiscuous mode Oct 27 13:26:01.665000 audit[10877]: NETFILTER_CFG table=raw:229 family=2 entries=1 op=nft_register_rule pid=10877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:01.665000 audit[10877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff1ebcca0 a2=0 a3=0 items=0 ppid=2508 pid=10877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:01.665000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:01.669219 systemd-networkd[1681]: veth9a49c82: Link UP Oct 27 13:26:01.683120 kernel: eth0: renamed from veth1bae4cb Oct 27 13:26:01.683215 kernel: docker0: port 1(veth9a49c82) entered blocking state Oct 27 13:26:01.689953 kernel: docker0: port 1(veth9a49c82) entered forwarding state Oct 27 13:26:01.690272 systemd-networkd[1681]: veth9a49c82: Gained carrier Oct 27 13:26:01.690948 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:02.293102 sshd[10833]: Invalid user michael from 109.160.32.131 port 57986 Oct 27 13:26:02.435713 sshd[10833]: Connection closed by invalid user michael 109.160.32.131 port 57986 [preauth] Oct 27 13:26:02.435000 audit[10833]: AUDIT1109 pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:02.437467 systemd[1]: sshd@54-21-10.0.0.24:22-109.160.32.131:57986.service: Deactivated successfully. Oct 27 13:26:02.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-21-10.0.0.24:22-109.160.32.131:57986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:02.720805 systemd[1]: docker-6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e.scope: Deactivated successfully. Oct 27 13:26:02.732566 containerd[1962]: time="2026-10-27T13:26:02.732537548Z" level=info msg="shim disconnected" id=6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e namespace=moby Oct 27 13:26:02.733071 containerd[1962]: time="2026-10-27T13:26:02.732700986Z" level=info msg="cleaning up after shim disconnected" id=6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e namespace=moby Oct 27 13:26:02.733071 containerd[1962]: time="2026-10-27T13:26:02.732713377Z" level=info msg="cleaning up dead shim" id=6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e namespace=moby Oct 27 13:26:02.733152 dockerd[2508]: time="2026-10-27T13:26:02.732553763Z" level=info msg="ignoring event" container=6cfff08cfd60940f097661d2623292f576493384a6a9302f14944e43e03a2b1e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:02.747274 systemd-networkd[1681]: veth9a49c82: Gained IPv6LL Oct 27 13:26:02.756486 systemd-networkd[1681]: veth9a49c82: Lost carrier Oct 27 13:26:02.757118 kernel: docker0: port 1(veth9a49c82) entered disabled state Oct 27 13:26:02.757165 kernel: veth1bae4cb: renamed from eth0 Oct 27 13:26:02.772000 audit[10908]: NETFILTER_CFG table=raw:230 family=2 entries=1 op=nft_unregister_rule pid=10908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:02.772000 audit[10908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc3361140 a2=0 a3=0 items=0 ppid=2508 pid=10908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.772000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:02.777474 systemd-networkd[1681]: veth9a49c82: Link DOWN Oct 27 13:26:02.781110 kernel: docker0: port 1(veth9a49c82) entered disabled state Oct 27 13:26:02.785149 kernel: veth9a49c82 (unregistering): left allmulticast mode Oct 27 13:26:02.785233 kernel: veth9a49c82 (unregistering): left promiscuous mode Oct 27 13:26:02.791962 kernel: docker0: port 1(veth9a49c82) entered disabled state Oct 27 13:26:02.776000 audit: ANOM_PROMISCUOUS dev=veth9a49c82 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:02.776000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775140 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:02.804372 systemd[1]: run-docker-netns-130b569ef5aa.mount: Deactivated successfully. Oct 27 13:26:02.808271 systemd[1]: var-lib-docker-overlay2-401d7ca039ab4a030b2ebcff8fa0848ac83d7a1fb6dfe3a6e752b42291085d7b-merged.mount: Deactivated successfully. Oct 27 13:26:02.818000 audit: BPF prog-id=518 op=UNLOAD Oct 27 13:26:02.818000 audit: BPF prog-id=522 op=UNLOAD Oct 27 13:26:02.876897 systemd[1]: var-lib-docker-overlay2-653dfe5972d08c4ab0ad5ac44ac615305f26c081f91be6e54c67c309e30a5b2b\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:02.944513 containerd[1962]: time="2026-10-27T13:26:02.944425776Z" level=info msg="connecting to shim 86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c" address="unix:///run/containerd/s/bcb04f334f7314c08b4e330d35f2a967563b4107c7b279e2afadc7b6d474e408" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:02.966286 systemd[1]: Started docker-86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c.scope - libcontainer container 86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c. Oct 27 13:26:02.975000 audit: BPF prog-id=523 op=LOAD Oct 27 13:26:02.976000 audit: BPF prog-id=524 op=LOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=21705039ff90 a2=98 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=524 op=UNLOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=525 op=LOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2170503a0268 a2=98 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=526 op=LOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=21705039ffa8 a2=98 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=526 op=UNLOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=525 op=UNLOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.976000 audit: BPF prog-id=527 op=LOAD Oct 27 13:26:02.976000 audit[10937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2170503a04b8 a2=98 a3=0 items=0 ppid=10925 pid=10937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38366131653133363661343365623934303730366364646266 Oct 27 13:26:02.988354 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:02.995517 kernel: docker0: port 1(vethe11bdfd) entered blocking state Oct 27 13:26:02.995616 kernel: docker0: port 1(vethe11bdfd) entered disabled state Oct 27 13:26:02.998392 kernel: vethe11bdfd: entered allmulticast mode Oct 27 13:26:03.001555 kernel: vethe11bdfd: entered promiscuous mode Oct 27 13:26:02.987000 audit: ANOM_PROMISCUOUS dev=vethe11bdfd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:02.987000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046930 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:02.987000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:03.003000 audit[10959]: NETFILTER_CFG table=raw:231 family=2 entries=1 op=nft_register_rule pid=10959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:03.003000 audit[10959]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe9094900 a2=0 a3=0 items=0 ppid=2508 pid=10959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:03.003000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:03.004614 systemd-networkd[1681]: vethe11bdfd: Link UP Oct 27 13:26:03.026828 kernel: eth0: renamed from vetha7cd4a2 Oct 27 13:26:03.026623 systemd-networkd[1681]: vethe11bdfd: Gained carrier Oct 27 13:26:03.026986 kernel: docker0: port 1(vethe11bdfd) entered blocking state Oct 27 13:26:03.027004 kernel: docker0: port 1(vethe11bdfd) entered forwarding state Oct 27 13:26:03.027223 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:04.055539 systemd[1]: docker-86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c.scope: Deactivated successfully. Oct 27 13:26:04.067131 containerd[1962]: time="2026-10-27T13:26:04.067054687Z" level=info msg="shim disconnected" id=86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c namespace=moby Oct 27 13:26:04.067131 containerd[1962]: time="2026-10-27T13:26:04.067083446Z" level=info msg="cleaning up after shim disconnected" id=86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c namespace=moby Oct 27 13:26:04.067131 containerd[1962]: time="2026-10-27T13:26:04.067090813Z" level=info msg="cleaning up dead shim" id=86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c namespace=moby Oct 27 13:26:04.067700 dockerd[2508]: time="2026-10-27T13:26:04.067171840Z" level=info msg="ignoring event" container=86a1e1366a43eb940706cddbf0ef9d1d905f55767dbd93ac3f5bb75816cb799c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:04.088902 systemd-networkd[1681]: vethe11bdfd: Lost carrier Oct 27 13:26:04.089238 kernel: docker0: port 1(vethe11bdfd) entered disabled state Oct 27 13:26:04.092195 kernel: vetha7cd4a2: renamed from eth0 Oct 27 13:26:04.109000 audit[10989]: NETFILTER_CFG table=raw:232 family=2 entries=1 op=nft_unregister_rule pid=10989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:04.109000 audit[10989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc32a9480 a2=0 a3=0 items=0 ppid=2508 pid=10989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.109000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:04.120701 systemd-networkd[1681]: vethe11bdfd: Link DOWN Oct 27 13:26:04.129265 kernel: docker0: port 1(vethe11bdfd) entered disabled state Oct 27 13:26:04.129328 kernel: vethe11bdfd (unregistering): left allmulticast mode Oct 27 13:26:04.133563 kernel: vethe11bdfd (unregistering): left promiscuous mode Oct 27 13:26:04.120000 audit: ANOM_PROMISCUOUS dev=vethe11bdfd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:04.137559 kernel: docker0: port 1(vethe11bdfd) entered disabled state Oct 27 13:26:04.120000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159b720 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.120000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:04.148066 systemd[1]: run-docker-netns-59f4480e3523.mount: Deactivated successfully. Oct 27 13:26:04.152056 systemd[1]: var-lib-docker-overlay2-653dfe5972d08c4ab0ad5ac44ac615305f26c081f91be6e54c67c309e30a5b2b-merged.mount: Deactivated successfully. Oct 27 13:26:04.168000 audit: BPF prog-id=523 op=UNLOAD Oct 27 13:26:04.168000 audit: BPF prog-id=527 op=UNLOAD Oct 27 13:26:04.277290 containerd[1962]: time="2026-10-27T13:26:04.277221548Z" level=info msg="connecting to shim 17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea" address="unix:///run/containerd/s/52535e7fc69688eb5b276f260cf932347eb0294b6608e3adf1c921ce0651a6da" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:04.294262 systemd[1]: Started docker-17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea.scope - libcontainer container 17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea. Oct 27 13:26:04.302000 audit: BPF prog-id=528 op=LOAD Oct 27 13:26:04.303000 audit: BPF prog-id=529 op=LOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b0835a5f90 a2=98 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=529 op=UNLOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=530 op=LOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b0835a6268 a2=98 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=531 op=LOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5b0835a5fa8 a2=98 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=531 op=UNLOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=530 op=UNLOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.303000 audit: BPF prog-id=532 op=LOAD Oct 27 13:26:04.303000 audit[11019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b0835a64b8 a2=98 a3=0 items=0 ppid=11007 pid=11019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376434303339303565333730306239353061616234656134 Oct 27 13:26:04.316794 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:04.323627 kernel: docker0: port 1(vetha49b54b) entered blocking state Oct 27 13:26:04.323700 kernel: docker0: port 1(vetha49b54b) entered disabled state Oct 27 13:26:04.326321 kernel: vetha49b54b: entered allmulticast mode Oct 27 13:26:04.328912 kernel: vetha49b54b: entered promiscuous mode Oct 27 13:26:04.316000 audit: ANOM_PROMISCUOUS dev=vetha49b54b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:04.316000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c23321e0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:04.331000 audit[11042]: NETFILTER_CFG table=raw:233 family=2 entries=1 op=nft_register_rule pid=11042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:04.331000 audit[11042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffedb8bf50 a2=0 a3=0 items=0 ppid=2508 pid=11042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:04.331000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:04.332521 systemd-networkd[1681]: vetha49b54b: Link UP Oct 27 13:26:04.346113 kernel: eth0: renamed from veth92149bd Oct 27 13:26:04.352997 kernel: docker0: port 1(vetha49b54b) entered blocking state Oct 27 13:26:04.353079 kernel: docker0: port 1(vetha49b54b) entered forwarding state Oct 27 13:26:04.353254 systemd-networkd[1681]: vetha49b54b: Gained carrier Oct 27 13:26:04.353828 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:05.246781 sshd[10548]: Connection closed by authenticating user root 109.160.32.131 port 47146 [preauth] Oct 27 13:26:05.246000 audit[10548]: AUDIT1109 pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:05.250343 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:26:05.250414 kernel: audit: type=1109 audit(1793107565.246:1815): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:05.251358 systemd[1]: sshd@53-4130-10.0.0.24:22-109.160.32.131:47146.service: Deactivated successfully. Oct 27 13:26:05.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-4130-10.0.0.24:22-109.160.32.131:47146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:05.280572 kernel: audit: type=1131 audit(1793107565.249:1816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-4130-10.0.0.24:22-109.160.32.131:47146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:05.381578 systemd[1]: docker-17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea.scope: Deactivated successfully. Oct 27 13:26:05.392823 containerd[1962]: time="2026-10-27T13:26:05.392779751Z" level=info msg="shim disconnected" id=17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea namespace=moby Oct 27 13:26:05.392823 containerd[1962]: time="2026-10-27T13:26:05.392805694Z" level=info msg="cleaning up after shim disconnected" id=17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea namespace=moby Oct 27 13:26:05.393654 containerd[1962]: time="2026-10-27T13:26:05.392811093Z" level=info msg="cleaning up dead shim" id=17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea namespace=moby Oct 27 13:26:05.393680 dockerd[2508]: time="2026-10-27T13:26:05.392850083Z" level=info msg="ignoring event" container=17d403905e3700b950aab4ea41c2bad8de6aa01f09f1825f7e7ec48fed3b67ea module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:05.414697 systemd-networkd[1681]: vetha49b54b: Lost carrier Oct 27 13:26:05.415157 kernel: docker0: port 1(vetha49b54b) entered disabled state Oct 27 13:26:05.418114 kernel: veth92149bd: renamed from eth0 Oct 27 13:26:05.436000 audit[11076]: NETFILTER_CFG table=raw:234 family=2 entries=1 op=nft_unregister_rule pid=11076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:05.436000 audit[11076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffebd61b70 a2=0 a3=0 items=0 ppid=2508 pid=11076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.464874 kernel: audit: type=1325 audit(1793107565.436:1817): table=raw:234 family=2 entries=1 op=nft_unregister_rule pid=11076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:05.464927 kernel: audit: type=1300 audit(1793107565.436:1817): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffebd61b70 a2=0 a3=0 items=0 ppid=2508 pid=11076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.436000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:05.477184 kernel: audit: type=1327 audit(1793107565.436:1817): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:05.478276 systemd-networkd[1681]: vetha49b54b: Link DOWN Oct 27 13:26:05.482134 kernel: docker0: port 1(vetha49b54b) entered disabled state Oct 27 13:26:05.489886 kernel: vetha49b54b (unregistering): left allmulticast mode Oct 27 13:26:05.489956 kernel: vetha49b54b (unregistering): left promiscuous mode Oct 27 13:26:05.476000 audit: ANOM_PROMISCUOUS dev=vetha49b54b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:05.493680 kernel: docker0: port 1(vetha49b54b) entered disabled state Oct 27 13:26:05.493701 kernel: audit: type=1700 audit(1793107565.476:1818): dev=vetha49b54b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:05.476000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf120 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.476000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:05.539778 kernel: audit: type=1300 audit(1793107565.476:1818): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf120 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.539850 kernel: audit: type=1327 audit(1793107565.476:1818): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:05.541837 systemd[1]: run-docker-netns-fd8c1d76313d.mount: Deactivated successfully. Oct 27 13:26:05.544455 systemd[1]: var-lib-docker-overlay2-798b7646f12fc6facff6b5defc502567fd8389ea7754dcaecdcb0c1171868601-merged.mount: Deactivated successfully. Oct 27 13:26:05.557000 audit: BPF prog-id=528 op=UNLOAD Oct 27 13:26:05.557000 audit: BPF prog-id=532 op=UNLOAD Oct 27 13:26:05.576706 kernel: audit: type=1334 audit(1793107565.557:1819): prog-id=528 op=UNLOAD Oct 27 13:26:05.576751 kernel: audit: type=1334 audit(1793107565.557:1820): prog-id=532 op=UNLOAD Oct 27 13:26:05.625799 systemd[1]: var-lib-docker-overlay2-81e4095fb167ff2fae7b3753a3ea12e70bf09bcefac6e1edecf61eed95eae0f0\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:05.696612 containerd[1962]: time="2026-10-27T13:26:05.696562506Z" level=info msg="connecting to shim 8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1" address="unix:///run/containerd/s/f9200b50471c856237ebfbba3ee589c9ef9aafc855087e1ec6422e8599512b68" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:05.715263 systemd[1]: Started docker-8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1.scope - libcontainer container 8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1. Oct 27 13:26:05.722000 audit: BPF prog-id=533 op=LOAD Oct 27 13:26:05.722000 audit: BPF prog-id=534 op=LOAD Oct 27 13:26:05.722000 audit[11104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=797daccf7f90 a2=98 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=534 op=UNLOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=535 op=LOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=797daccf8268 a2=98 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=536 op=LOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=797daccf7fa8 a2=98 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=536 op=UNLOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=535 op=UNLOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.723000 audit: BPF prog-id=537 op=LOAD Oct 27 13:26:05.723000 audit[11104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=797daccf84b8 a2=98 a3=0 items=0 ppid=11093 pid=11104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623631383563323464303366393933366464663135656136 Oct 27 13:26:05.737487 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:05.746865 kernel: docker0: port 1(vethd51982a) entered blocking state Oct 27 13:26:05.746945 kernel: docker0: port 1(vethd51982a) entered disabled state Oct 27 13:26:05.750116 kernel: vethd51982a: entered allmulticast mode Oct 27 13:26:05.752949 kernel: vethd51982a: entered promiscuous mode Oct 27 13:26:05.736000 audit: ANOM_PROMISCUOUS dev=vethd51982a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:05.736000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333710 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.736000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:05.754000 audit[11126]: NETFILTER_CFG table=raw:235 family=2 entries=1 op=nft_register_rule pid=11126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:05.754000 audit[11126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffb653920 a2=0 a3=0 items=0 ppid=2508 pid=11126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:05.754000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:05.756610 systemd-networkd[1681]: vethd51982a: Link UP Oct 27 13:26:05.775755 kernel: eth0: renamed from veth2fa2d2b Oct 27 13:26:05.775829 kernel: docker0: port 1(vethd51982a) entered blocking state Oct 27 13:26:05.779692 kernel: docker0: port 1(vethd51982a) entered forwarding state Oct 27 13:26:05.780017 systemd-networkd[1681]: vethd51982a: Gained carrier Oct 27 13:26:05.780456 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:06.807664 systemd[1]: docker-8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1.scope: Deactivated successfully. Oct 27 13:26:06.819812 containerd[1962]: time="2026-10-27T13:26:06.819766470Z" level=info msg="shim disconnected" id=8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1 namespace=moby Oct 27 13:26:06.819812 containerd[1962]: time="2026-10-27T13:26:06.819797156Z" level=info msg="cleaning up after shim disconnected" id=8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1 namespace=moby Oct 27 13:26:06.819812 containerd[1962]: time="2026-10-27T13:26:06.819802820Z" level=info msg="cleaning up dead shim" id=8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1 namespace=moby Oct 27 13:26:06.820729 dockerd[2508]: time="2026-10-27T13:26:06.820680471Z" level=info msg="ignoring event" container=8b6185c24d03f9936ddf15ea610b2a39d5431cb10c3f12a462a2721b812a01d1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:06.841117 kernel: docker0: port 1(vethd51982a) entered disabled state Oct 27 13:26:06.841195 kernel: veth2fa2d2b: renamed from eth0 Oct 27 13:26:06.842407 systemd-networkd[1681]: vethd51982a: Lost carrier Oct 27 13:26:06.860000 audit[11156]: NETFILTER_CFG table=raw:236 family=2 entries=1 op=nft_unregister_rule pid=11156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:06.860000 audit[11156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffe9fd570 a2=0 a3=0 items=0 ppid=2508 pid=11156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:06.860000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:06.866542 systemd-networkd[1681]: vethd51982a: Link DOWN Oct 27 13:26:06.873881 kernel: docker0: port 1(vethd51982a) entered disabled state Oct 27 13:26:06.873942 kernel: vethd51982a (unregistering): left allmulticast mode Oct 27 13:26:06.877917 kernel: vethd51982a (unregistering): left promiscuous mode Oct 27 13:26:06.865000 audit: ANOM_PROMISCUOUS dev=vethd51982a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:06.881752 kernel: docker0: port 1(vethd51982a) entered disabled state Oct 27 13:26:06.865000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce2e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:06.865000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:06.893956 systemd[1]: run-docker-netns-70e314239651.mount: Deactivated successfully. Oct 27 13:26:06.899007 systemd[1]: var-lib-docker-overlay2-81e4095fb167ff2fae7b3753a3ea12e70bf09bcefac6e1edecf61eed95eae0f0-merged.mount: Deactivated successfully. Oct 27 13:26:06.904000 audit: BPF prog-id=533 op=UNLOAD Oct 27 13:26:06.904000 audit: BPF prog-id=537 op=UNLOAD Oct 27 13:26:07.041027 containerd[1962]: time="2026-10-27T13:26:07.040949751Z" level=info msg="connecting to shim a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c" address="unix:///run/containerd/s/994b36fc4782e04899e4abb9bc2ce456890f98e6e8437898320a15f256010bcf" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:07.061283 systemd[1]: Started docker-a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c.scope - libcontainer container a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c. Oct 27 13:26:07.069000 audit: BPF prog-id=538 op=LOAD Oct 27 13:26:07.069000 audit: BPF prog-id=539 op=LOAD Oct 27 13:26:07.069000 audit[11183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74fd480ebf90 a2=98 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=539 op=UNLOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=540 op=LOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74fd480ec268 a2=98 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=541 op=LOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=74fd480ebfa8 a2=98 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=541 op=UNLOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=540 op=UNLOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.070000 audit: BPF prog-id=542 op=LOAD Oct 27 13:26:07.070000 audit[11183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=74fd480ec4b8 a2=98 a3=0 items=0 ppid=11172 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61393166383239643131623434396431636466633164363232 Oct 27 13:26:07.082647 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:07.092725 kernel: docker0: port 1(vethda1d62b) entered blocking state Oct 27 13:26:07.092798 kernel: docker0: port 1(vethda1d62b) entered disabled state Oct 27 13:26:07.095860 kernel: vethda1d62b: entered allmulticast mode Oct 27 13:26:07.099173 kernel: vethda1d62b: entered promiscuous mode Oct 27 13:26:07.081000 audit: ANOM_PROMISCUOUS dev=vethda1d62b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:07.081000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c23330e0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.081000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:07.100000 audit[11205]: NETFILTER_CFG table=raw:237 family=2 entries=1 op=nft_register_rule pid=11205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:07.100000 audit[11205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcda71910 a2=0 a3=0 items=0 ppid=2508 pid=11205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:07.100000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:07.102589 systemd-networkd[1681]: vethda1d62b: Link UP Oct 27 13:26:07.121490 kernel: eth0: renamed from vethdb114d3 Oct 27 13:26:07.121594 kernel: docker0: port 1(vethda1d62b) entered blocking state Oct 27 13:26:07.125010 kernel: docker0: port 1(vethda1d62b) entered forwarding state Oct 27 13:26:07.125420 systemd-networkd[1681]: vethda1d62b: Gained carrier Oct 27 13:26:07.125650 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:07.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4131-10.0.0.24:22-109.160.32.131:58022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:07.184439 systemd[1]: Started sshd@55-4131-10.0.0.24:22-109.160.32.131:58022.service - OpenSSH per-connection server daemon (109.160.32.131:58022). Oct 27 13:26:07.756278 sshd[11215]: Invalid user appuser from 109.160.32.131 port 58022 Oct 27 13:26:07.901277 sshd[11215]: Connection closed by invalid user appuser 109.160.32.131 port 58022 [preauth] Oct 27 13:26:07.900000 audit[11215]: AUDIT1109 pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:07.903084 systemd[1]: sshd@55-4131-10.0.0.24:22-109.160.32.131:58022.service: Deactivated successfully. Oct 27 13:26:07.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4131-10.0.0.24:22-109.160.32.131:58022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:08.149571 systemd[1]: docker-a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c.scope: Deactivated successfully. Oct 27 13:26:08.162071 dockerd[2508]: time="2026-10-27T13:26:08.162033240Z" level=info msg="ignoring event" container=a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:08.162422 containerd[1962]: time="2026-10-27T13:26:08.162038151Z" level=info msg="shim disconnected" id=a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c namespace=moby Oct 27 13:26:08.162422 containerd[1962]: time="2026-10-27T13:26:08.162078421Z" level=info msg="cleaning up after shim disconnected" id=a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c namespace=moby Oct 27 13:26:08.162422 containerd[1962]: time="2026-10-27T13:26:08.162087100Z" level=info msg="cleaning up dead shim" id=a91f829d11b449d1cdfc1d622035adf7b8c788746300418f55434457ccf3bc4c namespace=moby Oct 27 13:26:08.184683 systemd-networkd[1681]: vethda1d62b: Lost carrier Oct 27 13:26:08.185769 kernel: docker0: port 1(vethda1d62b) entered disabled state Oct 27 13:26:08.189119 kernel: vethdb114d3: renamed from eth0 Oct 27 13:26:08.201000 audit[11244]: NETFILTER_CFG table=raw:238 family=2 entries=1 op=nft_unregister_rule pid=11244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:08.201000 audit[11244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd6eed3b0 a2=0 a3=0 items=0 ppid=2508 pid=11244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:08.208550 systemd-networkd[1681]: vethda1d62b: Link DOWN Oct 27 13:26:08.212111 kernel: docker0: port 1(vethda1d62b) entered disabled state Oct 27 13:26:08.219109 kernel: vethda1d62b (unregistering): left allmulticast mode Oct 27 13:26:08.219177 kernel: vethda1d62b (unregistering): left promiscuous mode Oct 27 13:26:08.207000 audit: ANOM_PROMISCUOUS dev=vethda1d62b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:08.222713 kernel: docker0: port 1(vethda1d62b) entered disabled state Oct 27 13:26:08.207000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf580 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.207000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:08.236602 systemd[1]: run-docker-netns-60a342e6ed63.mount: Deactivated successfully. Oct 27 13:26:08.239349 systemd[1]: var-lib-docker-overlay2-077b81f1c024e88a7f94b82d083ce0b17d823ab10595426154445b670346c607-merged.mount: Deactivated successfully. Oct 27 13:26:08.259000 audit: BPF prog-id=538 op=UNLOAD Oct 27 13:26:08.259000 audit: BPF prog-id=542 op=UNLOAD Oct 27 13:26:08.323042 systemd[1]: var-lib-docker-overlay2-10cc3d1f395d0a78e71eee0f6d4ba94f3da63a820f29968b55384c8ce071bf31\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:08.391045 containerd[1962]: time="2026-10-27T13:26:08.390880768Z" level=info msg="connecting to shim 8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50" address="unix:///run/containerd/s/faa128d5bd5fdd16a0a1b2771adafd9cb38f498e26bf5243b7ab17dbfc8172bf" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:08.409253 systemd[1]: Started docker-8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50.scope - libcontainer container 8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50. Oct 27 13:26:08.416000 audit: BPF prog-id=543 op=LOAD Oct 27 13:26:08.416000 audit: BPF prog-id=544 op=LOAD Oct 27 13:26:08.416000 audit[11272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4cc501d59f90 a2=98 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=544 op=UNLOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=545 op=LOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4cc501d5a268 a2=98 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=546 op=LOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4cc501d59fa8 a2=98 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=546 op=UNLOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=545 op=UNLOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.417000 audit: BPF prog-id=547 op=LOAD Oct 27 13:26:08.417000 audit[11272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4cc501d5a4b8 a2=98 a3=0 items=0 ppid=11261 pid=11272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38626431306662373933393439323961346430343033303039 Oct 27 13:26:08.437680 kernel: docker0: port 1(veth5365473) entered blocking state Oct 27 13:26:08.437767 kernel: docker0: port 1(veth5365473) entered disabled state Oct 27 13:26:08.440775 kernel: veth5365473: entered allmulticast mode Oct 27 13:26:08.443568 kernel: veth5365473: entered promiscuous mode Oct 27 13:26:08.429000 audit: ANOM_PROMISCUOUS dev=veth5365473 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:08.429000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64270 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:08.444310 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:08.446000 audit[11293]: NETFILTER_CFG table=raw:239 family=2 entries=1 op=nft_register_rule pid=11293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:08.446000 audit[11293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff5d3da10 a2=0 a3=0 items=0 ppid=2508 pid=11293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:08.446000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:08.449124 systemd-networkd[1681]: veth5365473: Link UP Oct 27 13:26:08.461122 kernel: eth0: renamed from vethc7cf3dc Oct 27 13:26:08.467969 kernel: docker0: port 1(veth5365473) entered blocking state Oct 27 13:26:08.468044 kernel: docker0: port 1(veth5365473) entered forwarding state Oct 27 13:26:08.468281 systemd-networkd[1681]: veth5365473: Gained carrier Oct 27 13:26:08.468892 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:09.492002 systemd[1]: docker-8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50.scope: Deactivated successfully. Oct 27 13:26:09.505281 dockerd[2508]: time="2026-10-27T13:26:09.505149404Z" level=info msg="ignoring event" container=8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:09.505810 containerd[1962]: time="2026-10-27T13:26:09.505399061Z" level=info msg="shim disconnected" id=8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50 namespace=moby Oct 27 13:26:09.505810 containerd[1962]: time="2026-10-27T13:26:09.505425971Z" level=info msg="cleaning up after shim disconnected" id=8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50 namespace=moby Oct 27 13:26:09.505810 containerd[1962]: time="2026-10-27T13:26:09.505431531Z" level=info msg="cleaning up dead shim" id=8bd10fb79394929a4d0403009132ad46211124ef2a9861c16b62b3381fa43b50 namespace=moby Oct 27 13:26:09.526386 kernel: docker0: port 1(veth5365473) entered disabled state Oct 27 13:26:09.526202 systemd-networkd[1681]: veth5365473: Lost carrier Oct 27 13:26:09.530111 kernel: vethc7cf3dc: renamed from eth0 Oct 27 13:26:09.538000 audit[11325]: NETFILTER_CFG table=raw:240 family=2 entries=1 op=nft_unregister_rule pid=11325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:09.538000 audit[11325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3c08c90 a2=0 a3=0 items=0 ppid=2508 pid=11325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.538000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:09.547136 systemd-networkd[1681]: veth5365473: Link DOWN Oct 27 13:26:09.552867 kernel: docker0: port 1(veth5365473) entered disabled state Oct 27 13:26:09.552936 kernel: veth5365473 (unregistering): left allmulticast mode Oct 27 13:26:09.556381 kernel: veth5365473 (unregistering): left promiscuous mode Oct 27 13:26:09.544000 audit: ANOM_PROMISCUOUS dev=veth5365473 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:09.559717 kernel: docker0: port 1(veth5365473) entered disabled state Oct 27 13:26:09.544000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c13a4a20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.544000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:09.572133 systemd[1]: run-docker-netns-247a0f4d134e.mount: Deactivated successfully. Oct 27 13:26:09.574456 systemd[1]: var-lib-docker-overlay2-10cc3d1f395d0a78e71eee0f6d4ba94f3da63a820f29968b55384c8ce071bf31-merged.mount: Deactivated successfully. Oct 27 13:26:09.586000 audit: BPF prog-id=543 op=UNLOAD Oct 27 13:26:09.586000 audit: BPF prog-id=547 op=UNLOAD Oct 27 13:26:09.672944 systemd[1]: var-lib-docker-overlay2-b9a5978452964593b23cdf3fe5aac74b49322f486ad279c3362348d0179b0775\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:09.740635 containerd[1962]: time="2026-10-27T13:26:09.740592027Z" level=info msg="connecting to shim f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8" address="unix:///run/containerd/s/9a3a3b12c7f14e9aee8698c9ffef1b38d771385e9394055f5dc52c05b4e2e8e0" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:09.761252 systemd[1]: Started docker-f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8.scope - libcontainer container f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8. Oct 27 13:26:09.769000 audit: BPF prog-id=548 op=LOAD Oct 27 13:26:09.769000 audit: BPF prog-id=549 op=LOAD Oct 27 13:26:09.769000 audit[11353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72cdfb29ff90 a2=98 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=549 op=UNLOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=550 op=LOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72cdfb2a0268 a2=98 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=551 op=LOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=72cdfb29ffa8 a2=98 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=551 op=UNLOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=550 op=UNLOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.770000 audit: BPF prog-id=552 op=LOAD Oct 27 13:26:09.770000 audit[11353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72cdfb2a04b8 a2=98 a3=0 items=0 ppid=11341 pid=11353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373631376661353830323066313136343938333063303365 Oct 27 13:26:09.791254 kernel: docker0: port 1(veth63bcf88) entered blocking state Oct 27 13:26:09.791346 kernel: docker0: port 1(veth63bcf88) entered disabled state Oct 27 13:26:09.794236 kernel: veth63bcf88: entered allmulticast mode Oct 27 13:26:09.797078 kernel: veth63bcf88: entered promiscuous mode Oct 27 13:26:09.782000 audit: ANOM_PROMISCUOUS dev=veth63bcf88 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:09.782000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0b9b4a0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.782000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:09.797899 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:09.800000 audit[11374]: NETFILTER_CFG table=raw:241 family=2 entries=1 op=nft_register_rule pid=11374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:09.800000 audit[11374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc11be690 a2=0 a3=0 items=0 ppid=2508 pid=11374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:09.800000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:09.802310 systemd-networkd[1681]: veth63bcf88: Link UP Oct 27 13:26:09.819340 kernel: eth0: renamed from veth13dbd54 Oct 27 13:26:09.819420 kernel: docker0: port 1(veth63bcf88) entered blocking state Oct 27 13:26:09.822926 kernel: docker0: port 1(veth63bcf88) entered forwarding state Oct 27 13:26:09.823387 systemd-networkd[1681]: veth63bcf88: Gained carrier Oct 27 13:26:09.824318 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:10.848864 systemd[1]: docker-f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8.scope: Deactivated successfully. Oct 27 13:26:10.860107 dockerd[2508]: time="2026-10-27T13:26:10.859904164Z" level=info msg="ignoring event" container=f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:10.860726 containerd[1962]: time="2026-10-27T13:26:10.860609457Z" level=info msg="shim disconnected" id=f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8 namespace=moby Oct 27 13:26:10.860726 containerd[1962]: time="2026-10-27T13:26:10.860638103Z" level=info msg="cleaning up after shim disconnected" id=f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8 namespace=moby Oct 27 13:26:10.860726 containerd[1962]: time="2026-10-27T13:26:10.860643967Z" level=info msg="cleaning up dead shim" id=f7617fa58020f11649830c03e8599790edc632a8edd0ee8cddf1923408a8eba8 namespace=moby Oct 27 13:26:10.880766 systemd-networkd[1681]: veth63bcf88: Lost carrier Oct 27 13:26:10.882775 kernel: docker0: port 1(veth63bcf88) entered disabled state Oct 27 13:26:10.882829 kernel: veth13dbd54: renamed from eth0 Oct 27 13:26:10.897000 audit[11404]: NETFILTER_CFG table=raw:242 family=2 entries=1 op=nft_unregister_rule pid=11404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:10.901520 kernel: kauditd_printk_skb: 139 callbacks suppressed Oct 27 13:26:10.901564 kernel: audit: type=1325 audit(1793107570.897:1876): table=raw:242 family=2 entries=1 op=nft_unregister_rule pid=11404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:10.897000 audit[11404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff18acb10 a2=0 a3=0 items=0 ppid=2508 pid=11404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:10.927219 kernel: audit: type=1300 audit(1793107570.897:1876): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff18acb10 a2=0 a3=0 items=0 ppid=2508 pid=11404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:10.897000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:10.939037 kernel: audit: type=1327 audit(1793107570.897:1876): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:10.940129 kernel: docker0: port 1(veth63bcf88) entered disabled state Oct 27 13:26:10.941142 systemd-networkd[1681]: veth63bcf88: Link DOWN Oct 27 13:26:10.946803 kernel: veth63bcf88 (unregistering): left allmulticast mode Oct 27 13:26:10.950838 kernel: veth63bcf88 (unregistering): left promiscuous mode Oct 27 13:26:10.926000 audit: ANOM_PROMISCUOUS dev=veth63bcf88 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:10.955253 kernel: docker0: port 1(veth63bcf88) entered disabled state Oct 27 13:26:10.955279 kernel: audit: type=1700 audit(1793107570.926:1877): dev=veth63bcf88 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:10.926000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:10.926000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:10.989226 systemd[1]: run-docker-netns-3cc1c19faae4.mount: Deactivated successfully. Oct 27 13:26:11.003116 kernel: audit: type=1300 audit(1793107570.926:1877): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0960 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.003184 kernel: audit: type=1327 audit(1793107570.926:1877): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:11.006302 systemd[1]: var-lib-docker-overlay2-b9a5978452964593b23cdf3fe5aac74b49322f486ad279c3362348d0179b0775-merged.mount: Deactivated successfully. Oct 27 13:26:11.017000 audit: BPF prog-id=548 op=UNLOAD Oct 27 13:26:11.021000 audit: BPF prog-id=552 op=UNLOAD Oct 27 13:26:11.027183 kernel: audit: type=1334 audit(1793107571.017:1878): prog-id=548 op=UNLOAD Oct 27 13:26:11.027295 kernel: audit: type=1334 audit(1793107571.021:1879): prog-id=552 op=UNLOAD Oct 27 13:26:11.109556 systemd[1]: var-lib-docker-overlay2-8c29a221f1fc8ad47bfc41e02b525881f9be2703ab0620b643e15fc4aa8fb7de\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:11.172717 containerd[1962]: time="2026-10-27T13:26:11.172663598Z" level=info msg="connecting to shim 697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb" address="unix:///run/containerd/s/5df6ee60dbe3ef16a714c1692aae9edbe506ed37103b0242158d967b89835315" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:11.191452 systemd[1]: Started docker-697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb.scope - libcontainer container 697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb. Oct 27 13:26:11.199000 audit: BPF prog-id=553 op=LOAD Oct 27 13:26:11.204000 audit: BPF prog-id=554 op=LOAD Oct 27 13:26:11.209572 kernel: audit: type=1334 audit(1793107571.199:1880): prog-id=553 op=LOAD Oct 27 13:26:11.204000 audit[11432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=746a2539f90 a2=98 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.204000 audit: BPF prog-id=554 op=UNLOAD Oct 27 13:26:11.204000 audit[11432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.204000 audit: BPF prog-id=555 op=LOAD Oct 27 13:26:11.204000 audit[11432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=746a253a268 a2=98 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.209000 audit: BPF prog-id=556 op=LOAD Oct 27 13:26:11.209000 audit[11432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=746a2539fa8 a2=98 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.209000 audit: BPF prog-id=556 op=UNLOAD Oct 27 13:26:11.209000 audit[11432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.209000 audit: BPF prog-id=555 op=UNLOAD Oct 27 13:26:11.209000 audit[11432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.210698 kernel: audit: type=1334 audit(1793107571.204:1881): prog-id=554 op=LOAD Oct 27 13:26:11.209000 audit: BPF prog-id=557 op=LOAD Oct 27 13:26:11.209000 audit[11432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=746a253a4b8 a2=98 a3=0 items=0 ppid=11421 pid=11432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393764306664306335663730376666333933336163383164 Oct 27 13:26:11.229879 kernel: docker0: port 1(vethad8aa1a) entered blocking state Oct 27 13:26:11.229972 kernel: docker0: port 1(vethad8aa1a) entered disabled state Oct 27 13:26:11.232787 kernel: vethad8aa1a: entered allmulticast mode Oct 27 13:26:11.221000 audit: ANOM_PROMISCUOUS dev=vethad8aa1a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:11.221000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046030 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.221000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:11.237031 kernel: vethad8aa1a: entered promiscuous mode Oct 27 13:26:11.237525 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:11.240000 audit[11454]: NETFILTER_CFG table=raw:243 family=2 entries=1 op=nft_register_rule pid=11454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:11.240000 audit[11454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff15f27f0 a2=0 a3=0 items=0 ppid=2508 pid=11454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:11.240000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:11.244432 systemd-networkd[1681]: vethad8aa1a: Link UP Oct 27 13:26:11.261109 kernel: eth0: renamed from vethc175f60 Oct 27 13:26:11.261205 kernel: docker0: port 1(vethad8aa1a) entered blocking state Oct 27 13:26:11.261239 kernel: docker0: port 1(vethad8aa1a) entered forwarding state Oct 27 13:26:11.263929 systemd-networkd[1681]: vethad8aa1a: Gained carrier Oct 27 13:26:11.264730 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:12.290538 systemd[1]: docker-697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb.scope: Deactivated successfully. Oct 27 13:26:12.302907 containerd[1962]: time="2026-10-27T13:26:12.302830770Z" level=info msg="shim disconnected" id=697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb namespace=moby Oct 27 13:26:12.302907 containerd[1962]: time="2026-10-27T13:26:12.302862409Z" level=info msg="cleaning up after shim disconnected" id=697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb namespace=moby Oct 27 13:26:12.302907 containerd[1962]: time="2026-10-27T13:26:12.302870032Z" level=info msg="cleaning up dead shim" id=697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb namespace=moby Oct 27 13:26:12.303746 dockerd[2508]: time="2026-10-27T13:26:12.303227530Z" level=info msg="ignoring event" container=697d0fd0c5f707ff3933ac81df9f97e4e575ff8f8065055723c58feb0ad1c3fb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:12.324493 systemd-networkd[1681]: vethad8aa1a: Lost carrier Oct 27 13:26:12.327427 kernel: docker0: port 1(vethad8aa1a) entered disabled state Oct 27 13:26:12.327455 kernel: vethc175f60: renamed from eth0 Oct 27 13:26:12.342000 audit[11485]: NETFILTER_CFG table=raw:244 family=2 entries=1 op=nft_unregister_rule pid=11485 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:12.342000 audit[11485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc6d45940 a2=0 a3=0 items=0 ppid=2508 pid=11485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.342000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:12.350489 systemd-networkd[1681]: vethad8aa1a: Link DOWN Oct 27 13:26:12.356182 kernel: docker0: port 1(vethad8aa1a) entered disabled state Oct 27 13:26:12.356263 kernel: vethad8aa1a (unregistering): left allmulticast mode Oct 27 13:26:12.362471 kernel: vethad8aa1a (unregistering): left promiscuous mode Oct 27 13:26:12.349000 audit: ANOM_PROMISCUOUS dev=vethad8aa1a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:12.365995 kernel: docker0: port 1(vethad8aa1a) entered disabled state Oct 27 13:26:12.349000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.349000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:12.374731 systemd[1]: run-docker-netns-da14b36f4075.mount: Deactivated successfully. Oct 27 13:26:12.378043 systemd[1]: var-lib-docker-overlay2-8c29a221f1fc8ad47bfc41e02b525881f9be2703ab0620b643e15fc4aa8fb7de-merged.mount: Deactivated successfully. Oct 27 13:26:12.386000 audit: BPF prog-id=553 op=UNLOAD Oct 27 13:26:12.386000 audit: BPF prog-id=557 op=UNLOAD Oct 27 13:26:12.472987 systemd[1]: var-lib-docker-overlay2-3968902ddedc1c37e664a39d722359aa1c0ae09546b6c0ef360103a1edef5aac\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:12.535240 containerd[1962]: time="2026-10-27T13:26:12.535160374Z" level=info msg="connecting to shim 28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253" address="unix:///run/containerd/s/ea620cc77b2bc0535c89ef53ad7344f986f9041d0b8867dede3936c50302c927" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:12.554261 systemd[1]: Started docker-28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253.scope - libcontainer container 28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253. Oct 27 13:26:12.561000 audit: BPF prog-id=558 op=LOAD Oct 27 13:26:12.561000 audit: BPF prog-id=559 op=LOAD Oct 27 13:26:12.561000 audit[11513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b68fadb1f90 a2=98 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.561000 audit: BPF prog-id=559 op=UNLOAD Oct 27 13:26:12.561000 audit[11513]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.562000 audit: BPF prog-id=560 op=LOAD Oct 27 13:26:12.562000 audit[11513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b68fadb2268 a2=98 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.562000 audit: BPF prog-id=561 op=LOAD Oct 27 13:26:12.562000 audit[11513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3b68fadb1fa8 a2=98 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.562000 audit: BPF prog-id=561 op=UNLOAD Oct 27 13:26:12.562000 audit[11513]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.562000 audit: BPF prog-id=560 op=UNLOAD Oct 27 13:26:12.562000 audit[11513]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.562000 audit: BPF prog-id=562 op=LOAD Oct 27 13:26:12.562000 audit[11513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b68fadb24b8 a2=98 a3=0 items=0 ppid=11502 pid=11513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386537363036306137666561333637303762626636373261 Oct 27 13:26:12.583487 kernel: docker0: port 1(vethd32467f) entered blocking state Oct 27 13:26:12.583578 kernel: docker0: port 1(vethd32467f) entered disabled state Oct 27 13:26:12.586479 kernel: vethd32467f: entered allmulticast mode Oct 27 13:26:12.589625 kernel: vethd32467f: entered promiscuous mode Oct 27 13:26:12.574000 audit: ANOM_PROMISCUOUS dev=vethd32467f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:12.574000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047440 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:12.590979 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:12.592000 audit[11534]: NETFILTER_CFG table=raw:245 family=2 entries=1 op=nft_register_rule pid=11534 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:12.592000 audit[11534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe1674060 a2=0 a3=0 items=0 ppid=2508 pid=11534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:12.592000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:12.596530 systemd-networkd[1681]: vethd32467f: Link UP Oct 27 13:26:12.610118 kernel: eth0: renamed from vethdc14aa8 Oct 27 13:26:12.610191 kernel: docker0: port 1(vethd32467f) entered blocking state Oct 27 13:26:12.616965 kernel: docker0: port 1(vethd32467f) entered forwarding state Oct 27 13:26:12.617287 systemd-networkd[1681]: vethd32467f: Gained carrier Oct 27 13:26:12.617501 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:12.894409 systemd[1]: Started sshd@56-22-10.0.0.24:22-109.160.32.131:53468.service - OpenSSH per-connection server daemon (109.160.32.131:53468). Oct 27 13:26:12.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-22-10.0.0.24:22-109.160.32.131:53468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:13.642463 systemd[1]: docker-28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253.scope: Deactivated successfully. Oct 27 13:26:13.657117 containerd[1962]: time="2026-10-27T13:26:13.656951043Z" level=info msg="shim disconnected" id=28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253 namespace=moby Oct 27 13:26:13.657117 containerd[1962]: time="2026-10-27T13:26:13.657000808Z" level=info msg="cleaning up after shim disconnected" id=28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253 namespace=moby Oct 27 13:26:13.657117 containerd[1962]: time="2026-10-27T13:26:13.657009951Z" level=info msg="cleaning up dead shim" id=28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253 namespace=moby Oct 27 13:26:13.657442 dockerd[2508]: time="2026-10-27T13:26:13.657042189Z" level=info msg="ignoring event" container=28e76060a7fea36707bbf672a9f5941a10a8377b2800e4c380df7385277c9253 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:13.677495 systemd-networkd[1681]: vethd32467f: Lost carrier Oct 27 13:26:13.678127 kernel: docker0: port 1(vethd32467f) entered disabled state Oct 27 13:26:13.678192 kernel: vethdc14aa8: renamed from eth0 Oct 27 13:26:13.693000 audit[11567]: NETFILTER_CFG table=raw:246 family=2 entries=1 op=nft_unregister_rule pid=11567 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:13.693000 audit[11567]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff46e0070 a2=0 a3=0 items=0 ppid=2508 pid=11567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.693000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:13.698573 systemd-networkd[1681]: vethd32467f: Link DOWN Oct 27 13:26:13.702508 kernel: docker0: port 1(vethd32467f) entered disabled state Oct 27 13:26:13.710004 kernel: vethd32467f (unregistering): left allmulticast mode Oct 27 13:26:13.710078 kernel: vethd32467f (unregistering): left promiscuous mode Oct 27 13:26:13.697000 audit: ANOM_PROMISCUOUS dev=vethd32467f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:13.713553 kernel: docker0: port 1(vethd32467f) entered disabled state Oct 27 13:26:13.697000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1775660 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.697000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:13.718348 sshd[11543]: Invalid user admin1 from 109.160.32.131 port 53468 Oct 27 13:26:13.720909 systemd[1]: run-docker-netns-176a35b756e8.mount: Deactivated successfully. Oct 27 13:26:13.724752 systemd[1]: var-lib-docker-overlay2-3968902ddedc1c37e664a39d722359aa1c0ae09546b6c0ef360103a1edef5aac-merged.mount: Deactivated successfully. Oct 27 13:26:13.737000 audit: BPF prog-id=558 op=UNLOAD Oct 27 13:26:13.737000 audit: BPF prog-id=562 op=UNLOAD Oct 27 13:26:13.821427 systemd[1]: var-lib-docker-overlay2-22fcdc5c1c03ba1d90d1b73aca488c1d067b8e24cdff4e7b7f61d003321e0246\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:13.896344 containerd[1962]: time="2026-10-27T13:26:13.896208414Z" level=info msg="connecting to shim 60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678" address="unix:///run/containerd/s/db54ca9093e2f5530fad99a742b7bb6760a9d62a37d8b9da3f05040125e4f359" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:13.914258 systemd[1]: Started docker-60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678.scope - libcontainer container 60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678. Oct 27 13:26:13.921000 audit: BPF prog-id=563 op=LOAD Oct 27 13:26:13.922000 audit: BPF prog-id=564 op=LOAD Oct 27 13:26:13.922000 audit[11595]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3512c411bf90 a2=98 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.922000 audit: BPF prog-id=564 op=UNLOAD Oct 27 13:26:13.922000 audit[11595]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.922000 audit: BPF prog-id=565 op=LOAD Oct 27 13:26:13.922000 audit[11595]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3512c411c268 a2=98 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.922000 audit: BPF prog-id=566 op=LOAD Oct 27 13:26:13.922000 audit[11595]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3512c411bfa8 a2=98 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.923000 audit: BPF prog-id=566 op=UNLOAD Oct 27 13:26:13.923000 audit[11595]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.923000 audit: BPF prog-id=565 op=UNLOAD Oct 27 13:26:13.923000 audit[11595]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.923000 audit: BPF prog-id=567 op=LOAD Oct 27 13:26:13.923000 audit[11595]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3512c411c4b8 a2=98 a3=0 items=0 ppid=11583 pid=11595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36303334343832346663653538383666333534636537383631 Oct 27 13:26:13.928332 sshd[11543]: Connection closed by invalid user admin1 109.160.32.131 port 53468 [preauth] Oct 27 13:26:13.928000 audit[11543]: AUDIT1109 pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:13.931654 systemd[1]: sshd@56-22-10.0.0.24:22-109.160.32.131:53468.service: Deactivated successfully. Oct 27 13:26:13.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-22-10.0.0.24:22-109.160.32.131:53468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:13.943393 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:13.946668 kernel: docker0: port 1(veth69cbb94) entered blocking state Oct 27 13:26:13.946715 kernel: docker0: port 1(veth69cbb94) entered disabled state Oct 27 13:26:13.949414 kernel: veth69cbb94: entered allmulticast mode Oct 27 13:26:13.952313 kernel: veth69cbb94: entered promiscuous mode Oct 27 13:26:13.938000 audit: ANOM_PROMISCUOUS dev=veth69cbb94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:13.938000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2332420 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.938000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:13.954000 audit[11619]: NETFILTER_CFG table=raw:247 family=2 entries=1 op=nft_register_rule pid=11619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:13.954000 audit[11619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff254b8b0 a2=0 a3=0 items=0 ppid=2508 pid=11619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:13.954000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:13.955514 systemd-networkd[1681]: veth69cbb94: Link UP Oct 27 13:26:13.973644 kernel: eth0: renamed from veth4262a28 Oct 27 13:26:13.973731 kernel: docker0: port 1(veth69cbb94) entered blocking state Oct 27 13:26:13.977127 kernel: docker0: port 1(veth69cbb94) entered forwarding state Oct 27 13:26:13.977396 systemd-networkd[1681]: veth69cbb94: Gained carrier Oct 27 13:26:13.977615 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:15.002339 systemd[1]: docker-60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678.scope: Deactivated successfully. Oct 27 13:26:15.014741 dockerd[2508]: time="2026-10-27T13:26:15.014700937Z" level=info msg="ignoring event" container=60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:15.015351 containerd[1962]: time="2026-10-27T13:26:15.015303044Z" level=info msg="shim disconnected" id=60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678 namespace=moby Oct 27 13:26:15.015351 containerd[1962]: time="2026-10-27T13:26:15.015347113Z" level=info msg="cleaning up after shim disconnected" id=60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678 namespace=moby Oct 27 13:26:15.015986 containerd[1962]: time="2026-10-27T13:26:15.015355865Z" level=info msg="cleaning up dead shim" id=60344824fce5886f354ce7861aa3e8ee158b600f13bbba18b1c6800bdfb71678 namespace=moby Oct 27 13:26:15.035133 kernel: veth4262a28: renamed from eth0 Oct 27 13:26:15.035234 kernel: docker0: port 1(veth69cbb94) entered disabled state Oct 27 13:26:15.038192 systemd-networkd[1681]: veth69cbb94: Lost carrier Oct 27 13:26:15.052000 audit[11651]: NETFILTER_CFG table=raw:248 family=2 entries=1 op=nft_unregister_rule pid=11651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:15.052000 audit[11651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe08ff630 a2=0 a3=0 items=0 ppid=2508 pid=11651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.052000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:15.059544 systemd-networkd[1681]: veth69cbb94: Link DOWN Oct 27 13:26:15.063115 kernel: docker0: port 1(veth69cbb94) entered disabled state Oct 27 13:26:15.071359 kernel: veth69cbb94 (unregistering): left allmulticast mode Oct 27 13:26:15.071427 kernel: veth69cbb94 (unregistering): left promiscuous mode Oct 27 13:26:15.058000 audit: ANOM_PROMISCUOUS dev=veth69cbb94 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:15.075566 kernel: docker0: port 1(veth69cbb94) entered disabled state Oct 27 13:26:15.058000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774a00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.058000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:15.086780 systemd[1]: run-docker-netns-97d31346e1c4.mount: Deactivated successfully. Oct 27 13:26:15.090014 systemd[1]: var-lib-docker-overlay2-22fcdc5c1c03ba1d90d1b73aca488c1d067b8e24cdff4e7b7f61d003321e0246-merged.mount: Deactivated successfully. Oct 27 13:26:15.099000 audit: BPF prog-id=563 op=UNLOAD Oct 27 13:26:15.099000 audit: BPF prog-id=567 op=UNLOAD Oct 27 13:26:15.239611 containerd[1962]: time="2026-10-27T13:26:15.239487329Z" level=info msg="connecting to shim 20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136" address="unix:///run/containerd/s/53bed8ff0bfae27cdf3e8c16ab9e6db5767870393d1d36bc0bbbe0f152f157e3" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:15.258272 systemd[1]: Started docker-20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136.scope - libcontainer container 20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136. Oct 27 13:26:15.266000 audit: BPF prog-id=568 op=LOAD Oct 27 13:26:15.266000 audit: BPF prog-id=569 op=LOAD Oct 27 13:26:15.266000 audit[11678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5b3e5bd31f90 a2=98 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.266000 audit: BPF prog-id=569 op=UNLOAD Oct 27 13:26:15.266000 audit[11678]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.266000 audit: BPF prog-id=570 op=LOAD Oct 27 13:26:15.266000 audit[11678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5b3e5bd32268 a2=98 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.267000 audit: BPF prog-id=571 op=LOAD Oct 27 13:26:15.267000 audit[11678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=5b3e5bd31fa8 a2=98 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.267000 audit: BPF prog-id=571 op=UNLOAD Oct 27 13:26:15.267000 audit[11678]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.267000 audit: BPF prog-id=570 op=UNLOAD Oct 27 13:26:15.267000 audit[11678]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.267000 audit: BPF prog-id=572 op=LOAD Oct 27 13:26:15.267000 audit[11678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5b3e5bd324b8 a2=98 a3=0 items=0 ppid=11668 pid=11678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32306633316633646565316339346435633962623634636265 Oct 27 13:26:15.281767 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:15.288083 kernel: docker0: port 1(vethba1784d) entered blocking state Oct 27 13:26:15.288175 kernel: docker0: port 1(vethba1784d) entered disabled state Oct 27 13:26:15.291236 kernel: vethba1784d: entered allmulticast mode Oct 27 13:26:15.293899 kernel: vethba1784d: entered promiscuous mode Oct 27 13:26:15.280000 audit: ANOM_PROMISCUOUS dev=vethba1784d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:15.280000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2333680 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.280000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:15.295000 audit[11703]: NETFILTER_CFG table=raw:249 family=2 entries=1 op=nft_register_rule pid=11703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:15.295000 audit[11703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffe7facc0 a2=0 a3=0 items=0 ppid=2508 pid=11703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:15.295000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:15.297950 systemd-networkd[1681]: vethba1784d: Link UP Oct 27 13:26:15.312115 kernel: eth0: renamed from vethf042a5b Oct 27 13:26:15.318726 kernel: docker0: port 1(vethba1784d) entered blocking state Oct 27 13:26:15.318792 kernel: docker0: port 1(vethba1784d) entered forwarding state Oct 27 13:26:15.318954 systemd-networkd[1681]: vethba1784d: Gained carrier Oct 27 13:26:15.319474 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:16.345121 systemd[1]: docker-20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136.scope: Deactivated successfully. Oct 27 13:26:16.357658 dockerd[2508]: time="2026-10-27T13:26:16.357487583Z" level=info msg="ignoring event" container=20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:16.358372 containerd[1962]: time="2026-10-27T13:26:16.358231178Z" level=info msg="shim disconnected" id=20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136 namespace=moby Oct 27 13:26:16.358372 containerd[1962]: time="2026-10-27T13:26:16.358262096Z" level=info msg="cleaning up after shim disconnected" id=20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136 namespace=moby Oct 27 13:26:16.358372 containerd[1962]: time="2026-10-27T13:26:16.358267591Z" level=info msg="cleaning up dead shim" id=20f31f3dee1c94d5c9bb64cbe14721bac7e211121ffa89eee2198fbfe2810136 namespace=moby Oct 27 13:26:16.379104 kernel: vethf042a5b: renamed from eth0 Oct 27 13:26:16.379226 kernel: docker0: port 1(vethba1784d) entered disabled state Oct 27 13:26:16.380349 systemd-networkd[1681]: vethba1784d: Lost carrier Oct 27 13:26:16.389803 systemd-networkd[1681]: vethba1784d: Gained IPv6LL Oct 27 13:26:16.397000 audit[11733]: NETFILTER_CFG table=raw:250 family=2 entries=1 op=nft_unregister_rule pid=11733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:16.401672 kernel: kauditd_printk_skb: 137 callbacks suppressed Oct 27 13:26:16.401743 kernel: audit: type=1325 audit(1793107576.397:1935): table=raw:250 family=2 entries=1 op=nft_unregister_rule pid=11733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:16.397000 audit[11733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffffc9c400 a2=0 a3=0 items=0 ppid=2508 pid=11733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.426309 kernel: audit: type=1300 audit(1793107576.397:1935): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffffc9c400 a2=0 a3=0 items=0 ppid=2508 pid=11733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.397000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:16.427638 kernel: docker0: port 1(vethba1784d) entered disabled state Oct 27 13:26:16.427266 systemd-networkd[1681]: vethba1784d: Link DOWN Oct 27 13:26:16.441537 kernel: audit: type=1327 audit(1793107576.397:1935): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:16.442133 kernel: vethba1784d (unregistering): left allmulticast mode Oct 27 13:26:16.448892 kernel: vethba1784d (unregistering): left promiscuous mode Oct 27 13:26:16.425000 audit: ANOM_PROMISCUOUS dev=vethba1784d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:16.453249 kernel: docker0: port 1(vethba1784d) entered disabled state Oct 27 13:26:16.453274 kernel: audit: type=1700 audit(1793107576.425:1936): dev=vethba1784d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:16.425000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce000 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.425000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:16.500537 kernel: audit: type=1300 audit(1793107576.425:1936): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19ce000 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.500637 kernel: audit: type=1327 audit(1793107576.425:1936): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:16.503976 systemd[1]: run-docker-netns-5999f2dc2a1c.mount: Deactivated successfully. Oct 27 13:26:16.508659 systemd[1]: var-lib-docker-overlay2-173be04dfa2c130e2535f1a1d452b8a49add7c390d9b996b4034264b7c90e071-merged.mount: Deactivated successfully. Oct 27 13:26:16.515000 audit: BPF prog-id=568 op=UNLOAD Oct 27 13:26:16.515000 audit: BPF prog-id=572 op=UNLOAD Oct 27 13:26:16.527654 kernel: audit: type=1334 audit(1793107576.515:1937): prog-id=568 op=UNLOAD Oct 27 13:26:16.527704 kernel: audit: type=1334 audit(1793107576.515:1938): prog-id=572 op=UNLOAD Oct 27 13:26:16.640186 containerd[1962]: time="2026-10-27T13:26:16.639796453Z" level=info msg="connecting to shim daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d" address="unix:///run/containerd/s/3330a8b13f931be8eae19b92bb94c2b693699347fe9eba4c82adb582e493e994" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:16.660506 systemd[1]: Started docker-daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d.scope - libcontainer container daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d. Oct 27 13:26:16.668000 audit: BPF prog-id=573 op=LOAD Oct 27 13:26:16.672000 audit: BPF prog-id=574 op=LOAD Oct 27 13:26:16.677601 kernel: audit: type=1334 audit(1793107576.668:1939): prog-id=573 op=LOAD Oct 27 13:26:16.677668 kernel: audit: type=1334 audit(1793107576.672:1940): prog-id=574 op=LOAD Oct 27 13:26:16.672000 audit[11762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b7432f41f90 a2=98 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.672000 audit: BPF prog-id=574 op=UNLOAD Oct 27 13:26:16.672000 audit[11762]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.672000 audit: BPF prog-id=575 op=LOAD Oct 27 13:26:16.672000 audit[11762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b7432f42268 a2=98 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.676000 audit: BPF prog-id=576 op=LOAD Oct 27 13:26:16.676000 audit[11762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3b7432f41fa8 a2=98 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.676000 audit: BPF prog-id=576 op=UNLOAD Oct 27 13:26:16.676000 audit[11762]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.677000 audit: BPF prog-id=575 op=UNLOAD Oct 27 13:26:16.677000 audit[11762]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.677000 audit: BPF prog-id=577 op=LOAD Oct 27 13:26:16.677000 audit[11762]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3b7432f424b8 a2=98 a3=0 items=0 ppid=11750 pid=11762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616631623236333330626639653564343639333838313430 Oct 27 13:26:16.696185 kernel: docker0: port 1(vethd0a2d7e) entered blocking state Oct 27 13:26:16.696260 kernel: docker0: port 1(vethd0a2d7e) entered disabled state Oct 27 13:26:16.699167 kernel: vethd0a2d7e: entered allmulticast mode Oct 27 13:26:16.701968 kernel: vethd0a2d7e: entered promiscuous mode Oct 27 13:26:16.688000 audit: ANOM_PROMISCUOUS dev=vethd0a2d7e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:16.688000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121f8c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.688000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:16.702794 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:16.704000 audit[11783]: NETFILTER_CFG table=raw:251 family=2 entries=1 op=nft_register_rule pid=11783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:16.704000 audit[11783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe89270f0 a2=0 a3=0 items=0 ppid=2508 pid=11783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:16.704000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:16.706517 systemd-networkd[1681]: vethd0a2d7e: Link UP Oct 27 13:26:16.723085 kernel: eth0: renamed from vethfae3cde Oct 27 13:26:16.723161 kernel: docker0: port 1(vethd0a2d7e) entered blocking state Oct 27 13:26:16.726814 kernel: docker0: port 1(vethd0a2d7e) entered forwarding state Oct 27 13:26:16.726938 systemd-networkd[1681]: vethd0a2d7e: Gained carrier Oct 27 13:26:16.727627 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:17.754383 systemd[1]: docker-daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d.scope: Deactivated successfully. Oct 27 13:26:17.765939 dockerd[2508]: time="2026-10-27T13:26:17.765879518Z" level=info msg="ignoring event" container=daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:17.767136 containerd[1962]: time="2026-10-27T13:26:17.767069350Z" level=info msg="shim disconnected" id=daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d namespace=moby Oct 27 13:26:17.767136 containerd[1962]: time="2026-10-27T13:26:17.767119698Z" level=info msg="cleaning up after shim disconnected" id=daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d namespace=moby Oct 27 13:26:17.767136 containerd[1962]: time="2026-10-27T13:26:17.767127194Z" level=info msg="cleaning up dead shim" id=daf1b26330bf9e5d4693881405be43ae83bcc21f5d88720857f69f471efa317d namespace=moby Oct 27 13:26:17.788145 kernel: docker0: port 1(vethd0a2d7e) entered disabled state Oct 27 13:26:17.788226 systemd-networkd[1681]: vethd0a2d7e: Lost carrier Oct 27 13:26:17.792122 kernel: vethfae3cde: renamed from eth0 Oct 27 13:26:17.803000 audit[11814]: NETFILTER_CFG table=raw:252 family=2 entries=1 op=nft_unregister_rule pid=11814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:17.803000 audit[11814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffff1a6e70 a2=0 a3=0 items=0 ppid=2508 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:17.803000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:17.807607 systemd-networkd[1681]: vethd0a2d7e: Link DOWN Oct 27 13:26:17.812148 kernel: docker0: port 1(vethd0a2d7e) entered disabled state Oct 27 13:26:17.818792 kernel: vethd0a2d7e (unregistering): left allmulticast mode Oct 27 13:26:17.818856 kernel: vethd0a2d7e (unregistering): left promiscuous mode Oct 27 13:26:17.822451 kernel: docker0: port 1(vethd0a2d7e) entered disabled state Oct 27 13:26:17.806000 audit: ANOM_PROMISCUOUS dev=vethd0a2d7e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:17.806000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cef80 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:17.806000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:17.838497 systemd[1]: run-docker-netns-f2cdd4c887df.mount: Deactivated successfully. Oct 27 13:26:17.843187 systemd[1]: var-lib-docker-overlay2-5e3ff42e18a7a1ed58ed59e92752ff4086599f9147f8b7220db899a8c10622b4-merged.mount: Deactivated successfully. Oct 27 13:26:17.851000 audit: BPF prog-id=573 op=UNLOAD Oct 27 13:26:17.851000 audit: BPF prog-id=577 op=UNLOAD Oct 27 13:26:17.980532 containerd[1962]: time="2026-10-27T13:26:17.980373435Z" level=info msg="connecting to shim 9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1" address="unix:///run/containerd/s/789c23b9bca8a1b563d6dbf823898913ee0b05b9dd30e3bab53f2b6c99855740" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:18.003268 systemd[1]: Started docker-9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1.scope - libcontainer container 9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1. Oct 27 13:26:18.010000 audit: BPF prog-id=578 op=LOAD Oct 27 13:26:18.011000 audit: BPF prog-id=579 op=LOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=415670f31f90 a2=98 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=579 op=UNLOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=580 op=LOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=415670f32268 a2=98 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=581 op=LOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=415670f31fa8 a2=98 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=581 op=UNLOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=580 op=UNLOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.011000 audit: BPF prog-id=582 op=LOAD Oct 27 13:26:18.011000 audit[11842]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=415670f324b8 a2=98 a3=0 items=0 ppid=11831 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643030623037313365643139656636653366646665393030 Oct 27 13:26:18.033758 kernel: docker0: port 1(veth9b37515) entered blocking state Oct 27 13:26:18.033861 kernel: docker0: port 1(veth9b37515) entered disabled state Oct 27 13:26:18.036686 kernel: veth9b37515: entered allmulticast mode Oct 27 13:26:18.039576 kernel: veth9b37515: entered promiscuous mode Oct 27 13:26:18.025000 audit: ANOM_PROMISCUOUS dev=veth9b37515 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:18.025000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0fe9a70 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.025000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:18.040179 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:18.042000 audit[11863]: NETFILTER_CFG table=raw:253 family=2 entries=1 op=nft_register_rule pid=11863 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:18.042000 audit[11863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe219e6f0 a2=0 a3=0 items=0 ppid=2508 pid=11863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:18.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:18.043811 systemd-networkd[1681]: veth9b37515: Link UP Oct 27 13:26:18.060123 kernel: eth0: renamed from veth7e4f644 Oct 27 13:26:18.067195 kernel: docker0: port 1(veth9b37515) entered blocking state Oct 27 13:26:18.067247 kernel: docker0: port 1(veth9b37515) entered forwarding state Oct 27 13:26:18.067614 systemd-networkd[1681]: veth9b37515: Gained carrier Oct 27 13:26:18.067815 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:19.093313 systemd[1]: docker-9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1.scope: Deactivated successfully. Oct 27 13:26:19.105437 dockerd[2508]: time="2026-10-27T13:26:19.105396556Z" level=info msg="ignoring event" container=9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:19.105752 containerd[1962]: time="2026-10-27T13:26:19.105494310Z" level=info msg="shim disconnected" id=9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1 namespace=moby Oct 27 13:26:19.105752 containerd[1962]: time="2026-10-27T13:26:19.105521436Z" level=info msg="cleaning up after shim disconnected" id=9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1 namespace=moby Oct 27 13:26:19.105752 containerd[1962]: time="2026-10-27T13:26:19.105528732Z" level=info msg="cleaning up dead shim" id=9d00b0713ed19ef6e3fdfe90095eb4bfd8a9de22bf914e7fcc82abb4f3d259f1 namespace=moby Oct 27 13:26:19.126662 systemd-networkd[1681]: veth9b37515: Lost carrier Oct 27 13:26:19.127128 kernel: docker0: port 1(veth9b37515) entered disabled state Oct 27 13:26:19.130119 kernel: veth7e4f644: renamed from eth0 Oct 27 13:26:19.141000 audit[11893]: NETFILTER_CFG table=raw:254 family=2 entries=1 op=nft_unregister_rule pid=11893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:19.141000 audit[11893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7dde450 a2=0 a3=0 items=0 ppid=2508 pid=11893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.141000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:19.152612 systemd-networkd[1681]: veth9b37515: Link DOWN Oct 27 13:26:19.160575 kernel: docker0: port 1(veth9b37515) entered disabled state Oct 27 13:26:19.160661 kernel: veth9b37515 (unregistering): left allmulticast mode Oct 27 13:26:19.164779 kernel: veth9b37515 (unregistering): left promiscuous mode Oct 27 13:26:19.164852 kernel: docker0: port 1(veth9b37515) entered disabled state Oct 27 13:26:19.151000 audit: ANOM_PROMISCUOUS dev=veth9b37515 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:19.151000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a28e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.151000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:19.176977 systemd[1]: run-docker-netns-e6a2fdea7127.mount: Deactivated successfully. Oct 27 13:26:19.179709 systemd[1]: var-lib-docker-overlay2-41b7d8d115c48164b5cae614655e0b23c5045f3718c506ee6d6c32c4d951d4a7-merged.mount: Deactivated successfully. Oct 27 13:26:19.188000 audit: BPF prog-id=578 op=UNLOAD Oct 27 13:26:19.188000 audit: BPF prog-id=582 op=UNLOAD Oct 27 13:26:19.333730 containerd[1962]: time="2026-10-27T13:26:19.333517781Z" level=info msg="connecting to shim 11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f" address="unix:///run/containerd/s/c1bc64a4e2d2a22ee6103fa370ec08fe753659f2e2d2bf0751bc50761317e362" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:19.351272 systemd[1]: Started docker-11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f.scope - libcontainer container 11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f. Oct 27 13:26:19.360000 audit: BPF prog-id=583 op=LOAD Oct 27 13:26:19.360000 audit: BPF prog-id=584 op=LOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=53b2be931f90 a2=98 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=584 op=UNLOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=585 op=LOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=53b2be932268 a2=98 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=586 op=LOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=53b2be931fa8 a2=98 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=586 op=UNLOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=585 op=UNLOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.360000 audit: BPF prog-id=587 op=LOAD Oct 27 13:26:19.360000 audit[11921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=53b2be9324b8 a2=98 a3=0 items=0 ppid=11909 pid=11921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316430303964376231656332396463653263616330633738 Oct 27 13:26:19.378763 kernel: docker0: port 1(veth92df5c7) entered blocking state Oct 27 13:26:19.378870 kernel: docker0: port 1(veth92df5c7) entered disabled state Oct 27 13:26:19.381808 kernel: veth92df5c7: entered allmulticast mode Oct 27 13:26:19.370000 audit: ANOM_PROMISCUOUS dev=veth92df5c7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:19.370000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c14732c0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.370000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:19.386000 audit[11943]: NETFILTER_CFG table=raw:255 family=2 entries=1 op=nft_register_rule pid=11943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:19.386000 audit[11943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffeccd1c20 a2=0 a3=0 items=0 ppid=2508 pid=11943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:19.386000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:19.387866 kernel: veth92df5c7: entered promiscuous mode Oct 27 13:26:19.386936 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:19.388297 systemd-networkd[1681]: veth92df5c7: Link UP Oct 27 13:26:19.401120 kernel: eth0: renamed from veth20d3e43 Oct 27 13:26:19.408110 kernel: docker0: port 1(veth92df5c7) entered blocking state Oct 27 13:26:19.408184 kernel: docker0: port 1(veth92df5c7) entered forwarding state Oct 27 13:26:19.408456 systemd-networkd[1681]: veth92df5c7: Gained carrier Oct 27 13:26:19.409551 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:20.436214 systemd[1]: docker-11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f.scope: Deactivated successfully. Oct 27 13:26:20.449457 containerd[1962]: time="2026-10-27T13:26:20.449301743Z" level=info msg="shim disconnected" id=11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f namespace=moby Oct 27 13:26:20.449457 containerd[1962]: time="2026-10-27T13:26:20.449331702Z" level=info msg="cleaning up after shim disconnected" id=11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f namespace=moby Oct 27 13:26:20.449457 containerd[1962]: time="2026-10-27T13:26:20.449339909Z" level=info msg="cleaning up dead shim" id=11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f namespace=moby Oct 27 13:26:20.449818 dockerd[2508]: time="2026-10-27T13:26:20.449560504Z" level=info msg="ignoring event" container=11d009d7b1ec29dce2cac0c78f5e4f1ba8e77590e78eef13dcc1156629be0a7f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:20.470341 systemd-networkd[1681]: veth92df5c7: Lost carrier Oct 27 13:26:20.471335 kernel: docker0: port 1(veth92df5c7) entered disabled state Oct 27 13:26:20.471367 kernel: veth20d3e43: renamed from eth0 Oct 27 13:26:20.486000 audit[11974]: NETFILTER_CFG table=raw:256 family=2 entries=1 op=nft_unregister_rule pid=11974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:20.486000 audit[11974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd49baed0 a2=0 a3=0 items=0 ppid=2508 pid=11974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:20.489566 systemd-networkd[1681]: veth92df5c7: Link DOWN Oct 27 13:26:20.493117 kernel: docker0: port 1(veth92df5c7) entered disabled state Oct 27 13:26:20.500550 kernel: veth92df5c7 (unregistering): left allmulticast mode Oct 27 13:26:20.500622 kernel: veth92df5c7 (unregistering): left promiscuous mode Oct 27 13:26:20.489000 audit: ANOM_PROMISCUOUS dev=veth92df5c7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:20.504254 kernel: docker0: port 1(veth92df5c7) entered disabled state Oct 27 13:26:20.489000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a3ae0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.489000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:20.515330 systemd[1]: run-docker-netns-079880de1995.mount: Deactivated successfully. Oct 27 13:26:20.519190 systemd[1]: var-lib-docker-overlay2-6a209aecae6fe5bc4658f66f8b2778abd20b7a267c943702a76111dd91d9cc09-merged.mount: Deactivated successfully. Oct 27 13:26:20.530000 audit: BPF prog-id=583 op=UNLOAD Oct 27 13:26:20.530000 audit: BPF prog-id=587 op=UNLOAD Oct 27 13:26:20.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-4132-10.0.0.24:22-109.160.32.131:53538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:20.605635 systemd[1]: Started sshd@57-4132-10.0.0.24:22-109.160.32.131:53538.service - OpenSSH per-connection server daemon (109.160.32.131:53538). Oct 27 13:26:20.699379 containerd[1962]: time="2026-10-27T13:26:20.698777664Z" level=info msg="connecting to shim 0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d" address="unix:///run/containerd/s/14cd770a90c7c210772ee39548f9b9b00b2f960e7c974c218faef9c5113d2064" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:20.716259 systemd[1]: Started docker-0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d.scope - libcontainer container 0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d. Oct 27 13:26:20.724000 audit: BPF prog-id=588 op=LOAD Oct 27 13:26:20.724000 audit: BPF prog-id=589 op=LOAD Oct 27 13:26:20.724000 audit[12007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=15974555f90 a2=98 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.724000 audit: BPF prog-id=589 op=UNLOAD Oct 27 13:26:20.724000 audit[12007]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.725000 audit: BPF prog-id=590 op=LOAD Oct 27 13:26:20.725000 audit[12007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=15974556268 a2=98 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.725000 audit: BPF prog-id=591 op=LOAD Oct 27 13:26:20.725000 audit[12007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=15974555fa8 a2=98 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.725000 audit: BPF prog-id=591 op=UNLOAD Oct 27 13:26:20.725000 audit[12007]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.725000 audit: BPF prog-id=590 op=UNLOAD Oct 27 13:26:20.725000 audit[12007]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.725000 audit: BPF prog-id=592 op=LOAD Oct 27 13:26:20.725000 audit[12007]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=159745564b8 a2=98 a3=0 items=0 ppid=11996 pid=12007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653630323265316637623431323062353732613163663338 Oct 27 13:26:20.738310 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:20.744944 kernel: docker0: port 1(vethdfda1a4) entered blocking state Oct 27 13:26:20.744997 kernel: docker0: port 1(vethdfda1a4) entered disabled state Oct 27 13:26:20.747626 kernel: vethdfda1a4: entered allmulticast mode Oct 27 13:26:20.750414 kernel: vethdfda1a4: entered promiscuous mode Oct 27 13:26:20.737000 audit: ANOM_PROMISCUOUS dev=vethdfda1a4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:20.737000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2046600 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.737000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:20.752000 audit[12028]: NETFILTER_CFG table=raw:257 family=2 entries=1 op=nft_register_rule pid=12028 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:20.752000 audit[12028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffecb4cea0 a2=0 a3=0 items=0 ppid=2508 pid=12028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:20.752000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:20.753505 systemd-networkd[1681]: vethdfda1a4: Link UP Oct 27 13:26:20.773127 kernel: eth0: renamed from veth0098ddf Oct 27 13:26:20.773250 kernel: docker0: port 1(vethdfda1a4) entered blocking state Oct 27 13:26:20.773276 kernel: docker0: port 1(vethdfda1a4) entered forwarding state Oct 27 13:26:20.775451 systemd-networkd[1681]: vethdfda1a4: Gained carrier Oct 27 13:26:20.776150 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:21.802880 systemd[1]: docker-0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d.scope: Deactivated successfully. Oct 27 13:26:21.816301 dockerd[2508]: time="2026-10-27T13:26:21.816248076Z" level=info msg="ignoring event" container=0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:21.816637 containerd[1962]: time="2026-10-27T13:26:21.816356309Z" level=info msg="shim disconnected" id=0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d namespace=moby Oct 27 13:26:21.816637 containerd[1962]: time="2026-10-27T13:26:21.816380124Z" level=info msg="cleaning up after shim disconnected" id=0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d namespace=moby Oct 27 13:26:21.816637 containerd[1962]: time="2026-10-27T13:26:21.816385979Z" level=info msg="cleaning up dead shim" id=0e6022e1f7b4120b572a1cf388742e3d28725e444ef971d9128054acc1755f0d namespace=moby Oct 27 13:26:21.838133 kernel: docker0: port 1(vethdfda1a4) entered disabled state Oct 27 13:26:21.838253 kernel: veth0098ddf: renamed from eth0 Oct 27 13:26:21.840590 systemd-networkd[1681]: vethdfda1a4: Lost carrier Oct 27 13:26:21.855000 audit[12057]: NETFILTER_CFG table=raw:258 family=2 entries=1 op=nft_unregister_rule pid=12057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:21.859462 kernel: kauditd_printk_skb: 135 callbacks suppressed Oct 27 13:26:21.859538 kernel: audit: type=1325 audit(1793107581.855:1992): table=raw:258 family=2 entries=1 op=nft_unregister_rule pid=12057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:21.855000 audit[12057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdbfe5cb0 a2=0 a3=0 items=0 ppid=2508 pid=12057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:21.886036 kernel: audit: type=1300 audit(1793107581.855:1992): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdbfe5cb0 a2=0 a3=0 items=0 ppid=2508 pid=12057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:21.886709 systemd-networkd[1681]: vethdfda1a4: Gained IPv6LL Oct 27 13:26:21.887806 systemd-networkd[1681]: vethdfda1a4: Link DOWN Oct 27 13:26:21.855000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:21.898912 kernel: audit: type=1327 audit(1793107581.855:1992): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:21.898947 kernel: docker0: port 1(vethdfda1a4) entered disabled state Oct 27 13:26:21.903597 kernel: vethdfda1a4 (unregistering): left allmulticast mode Oct 27 13:26:21.909499 kernel: vethdfda1a4 (unregistering): left promiscuous mode Oct 27 13:26:21.886000 audit: ANOM_PROMISCUOUS dev=vethdfda1a4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:21.913252 kernel: docker0: port 1(vethdfda1a4) entered disabled state Oct 27 13:26:21.913287 kernel: audit: type=1700 audit(1793107581.886:1993): dev=vethdfda1a4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:21.886000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c10527a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:21.934568 systemd[1]: run-docker-netns-326d7cbbdf67.mount: Deactivated successfully. Oct 27 13:26:21.886000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:21.958821 kernel: audit: type=1300 audit(1793107581.886:1993): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c10527a0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:21.958893 kernel: audit: type=1327 audit(1793107581.886:1993): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:21.963429 systemd[1]: var-lib-docker-overlay2-13b4085e76808fdc163e9b8c303e61323ac7ad1514059cb78c7162128f89f027-merged.mount: Deactivated successfully. Oct 27 13:26:21.967000 audit: BPF prog-id=588 op=UNLOAD Oct 27 13:26:21.967000 audit: BPF prog-id=592 op=UNLOAD Oct 27 13:26:21.976765 kernel: audit: type=1334 audit(1793107581.967:1994): prog-id=588 op=UNLOAD Oct 27 13:26:21.976863 kernel: audit: type=1334 audit(1793107581.967:1995): prog-id=592 op=UNLOAD Oct 27 13:26:22.131436 containerd[1962]: time="2026-10-27T13:26:22.131299301Z" level=info msg="connecting to shim 16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4" address="unix:///run/containerd/s/f972f0cc539bdfc2a1b426d75acbf06a6b63beb5c658bf4cb2c86a391a225d36" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:22.149269 systemd[1]: Started docker-16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4.scope - libcontainer container 16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4. Oct 27 13:26:22.157000 audit: BPF prog-id=593 op=LOAD Oct 27 13:26:22.161000 audit: BPF prog-id=594 op=LOAD Oct 27 13:26:22.167056 kernel: audit: type=1334 audit(1793107582.157:1996): prog-id=593 op=LOAD Oct 27 13:26:22.161000 audit[12085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32add1d31f90 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.162000 audit: BPF prog-id=594 op=UNLOAD Oct 27 13:26:22.162000 audit[12085]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.167657 kernel: audit: type=1334 audit(1793107582.161:1997): prog-id=594 op=LOAD Oct 27 13:26:22.162000 audit: BPF prog-id=595 op=LOAD Oct 27 13:26:22.162000 audit[12085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32add1d32268 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.166000 audit: BPF prog-id=596 op=LOAD Oct 27 13:26:22.166000 audit[12085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=32add1d31fa8 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.166000 audit: BPF prog-id=596 op=UNLOAD Oct 27 13:26:22.166000 audit[12085]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.166000 audit: BPF prog-id=595 op=UNLOAD Oct 27 13:26:22.166000 audit[12085]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.166000 audit: BPF prog-id=597 op=LOAD Oct 27 13:26:22.166000 audit[12085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32add1d324b8 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31366534366530336563373136643131663335386561333866 Oct 27 13:26:22.180959 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:22.188076 kernel: docker0: port 1(vethcd2d252) entered blocking state Oct 27 13:26:22.188156 kernel: docker0: port 1(vethcd2d252) entered disabled state Oct 27 13:26:22.190799 kernel: vethcd2d252: entered allmulticast mode Oct 27 13:26:22.179000 audit: ANOM_PROMISCUOUS dev=vethcd2d252 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:22.179000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c1c64b10 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.179000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:22.195134 kernel: vethcd2d252: entered promiscuous mode Oct 27 13:26:22.195000 audit[12106]: NETFILTER_CFG table=raw:259 family=2 entries=1 op=nft_register_rule pid=12106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:22.195000 audit[12106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffee1d6e0 a2=0 a3=0 items=0 ppid=2508 pid=12106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:22.195000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:22.196868 systemd-networkd[1681]: vethcd2d252: Link UP Oct 27 13:26:22.210116 kernel: eth0: renamed from vethd5ea682 Oct 27 13:26:22.217658 kernel: docker0: port 1(vethcd2d252) entered blocking state Oct 27 13:26:22.217738 kernel: docker0: port 1(vethcd2d252) entered forwarding state Oct 27 13:26:22.218085 systemd-networkd[1681]: vethcd2d252: Gained carrier Oct 27 13:26:22.218407 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:22.903656 sshd[11977]: Invalid user trader from 109.160.32.131 port 53538 Oct 27 13:26:23.242902 systemd[1]: docker-16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4.scope: Deactivated successfully. Oct 27 13:26:23.254593 containerd[1962]: time="2026-10-27T13:26:23.254526739Z" level=info msg="shim disconnected" id=16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4 namespace=moby Oct 27 13:26:23.254963 sshd[11977]: Connection closed by invalid user trader 109.160.32.131 port 53538 [preauth] Oct 27 13:26:23.254000 audit[11977]: AUDIT1109 pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:23.255870 containerd[1962]: time="2026-10-27T13:26:23.255028781Z" level=info msg="cleaning up after shim disconnected" id=16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4 namespace=moby Oct 27 13:26:23.255870 containerd[1962]: time="2026-10-27T13:26:23.255047172Z" level=info msg="cleaning up dead shim" id=16e46e03ec716d11f358ea38f7f60fab48ad0a0b47b9462790ea3a9009d778b4 namespace=moby Oct 27 13:26:23.258390 systemd[1]: sshd@57-4132-10.0.0.24:22-109.160.32.131:53538.service: Deactivated successfully. Oct 27 13:26:23.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-4132-10.0.0.24:22-109.160.32.131:53538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:23.279518 kernel: vethd5ea682: renamed from eth0 Oct 27 13:26:23.279620 kernel: docker0: port 1(vethcd2d252) entered disabled state Oct 27 13:26:23.279757 systemd-networkd[1681]: vethcd2d252: Lost carrier Oct 27 13:26:23.293000 audit[12139]: NETFILTER_CFG table=raw:260 family=2 entries=1 op=nft_unregister_rule pid=12139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:23.293000 audit[12139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7178930 a2=0 a3=0 items=0 ppid=2508 pid=12139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.293000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:23.298598 systemd-networkd[1681]: vethcd2d252: Link DOWN Oct 27 13:26:23.306661 kernel: docker0: port 1(vethcd2d252) entered disabled state Oct 27 13:26:23.306740 kernel: vethcd2d252 (unregistering): left allmulticast mode Oct 27 13:26:23.310777 kernel: vethcd2d252 (unregistering): left promiscuous mode Oct 27 13:26:23.297000 audit: ANOM_PROMISCUOUS dev=vethcd2d252 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:23.314397 kernel: docker0: port 1(vethcd2d252) entered disabled state Oct 27 13:26:23.297000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd1980 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:23.325556 systemd[1]: run-docker-netns-3645e341a910.mount: Deactivated successfully. Oct 27 13:26:23.331470 systemd[1]: var-lib-docker-overlay2-fc6319a0e5bce50abea8ce770973af272eb4ea10ed2e13deae7caffffa080a44-merged.mount: Deactivated successfully. Oct 27 13:26:23.335000 audit: BPF prog-id=593 op=UNLOAD Oct 27 13:26:23.335000 audit: BPF prog-id=597 op=UNLOAD Oct 27 13:26:23.428840 systemd[1]: var-lib-docker-overlay2-5918e1d28d244271fd088d866a511d8f9bc00af22c0156d795604188a5b33523\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:23.486662 containerd[1962]: time="2026-10-27T13:26:23.486608420Z" level=info msg="connecting to shim 71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6" address="unix:///run/containerd/s/af020f19855dd0e12dbdf14b861e0d19a02d31ad6b913feccd813d801685f5bd" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:23.503283 systemd[1]: Started docker-71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6.scope - libcontainer container 71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6. Oct 27 13:26:23.510000 audit: BPF prog-id=598 op=LOAD Oct 27 13:26:23.511000 audit: BPF prog-id=599 op=LOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4fe3ecb61f90 a2=98 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=599 op=UNLOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=600 op=LOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4fe3ecb62268 a2=98 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=601 op=LOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=4fe3ecb61fa8 a2=98 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=601 op=UNLOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=600 op=UNLOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.511000 audit: BPF prog-id=602 op=LOAD Oct 27 13:26:23.511000 audit[12167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4fe3ecb624b8 a2=98 a3=0 items=0 ppid=12155 pid=12167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37316630616337346261363439383836633861636361323963 Oct 27 13:26:23.531198 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:23.538666 kernel: docker0: port 1(vethce3845d) entered blocking state Oct 27 13:26:23.538763 kernel: docker0: port 1(vethce3845d) entered disabled state Oct 27 13:26:23.543442 kernel: vethce3845d: entered allmulticast mode Oct 27 13:26:23.546502 kernel: vethce3845d: entered promiscuous mode Oct 27 13:26:23.530000 audit: ANOM_PROMISCUOUS dev=vethce3845d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:23.530000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c2047c50 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.530000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:23.547000 audit[12189]: NETFILTER_CFG table=raw:261 family=2 entries=1 op=nft_register_rule pid=12189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:23.547000 audit[12189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffec168f30 a2=0 a3=0 items=0 ppid=2508 pid=12189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:23.547000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:23.549694 systemd-networkd[1681]: vethce3845d: Link UP Oct 27 13:26:23.569118 kernel: eth0: renamed from veth7d806f0 Oct 27 13:26:23.569234 kernel: docker0: port 1(vethce3845d) entered blocking state Oct 27 13:26:23.569267 kernel: docker0: port 1(vethce3845d) entered forwarding state Oct 27 13:26:23.570980 systemd-networkd[1681]: vethce3845d: Gained carrier Oct 27 13:26:23.571496 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:24.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-23-10.0.0.24:22-109.160.32.131:41288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:24.476138 systemd[1]: Started sshd@58-23-10.0.0.24:22-109.160.32.131:41288.service - OpenSSH per-connection server daemon (109.160.32.131:41288). Oct 27 13:26:24.597238 systemd[1]: docker-71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6.scope: Deactivated successfully. Oct 27 13:26:24.608143 containerd[1962]: time="2026-10-27T13:26:24.608090031Z" level=info msg="shim disconnected" id=71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6 namespace=moby Oct 27 13:26:24.608143 containerd[1962]: time="2026-10-27T13:26:24.608141324Z" level=info msg="cleaning up after shim disconnected" id=71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6 namespace=moby Oct 27 13:26:24.608143 containerd[1962]: time="2026-10-27T13:26:24.608148411Z" level=info msg="cleaning up dead shim" id=71f0ac74ba649886c8acca29c0c68b4b4788250eabb53e159616cb80fdf976b6 namespace=moby Oct 27 13:26:24.629486 kernel: docker0: port 1(vethce3845d) entered disabled state Oct 27 13:26:24.629262 systemd-networkd[1681]: vethce3845d: Lost carrier Oct 27 13:26:24.633115 kernel: veth7d806f0: renamed from eth0 Oct 27 13:26:24.644000 audit[12222]: NETFILTER_CFG table=raw:262 family=2 entries=1 op=nft_unregister_rule pid=12222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:24.644000 audit[12222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc82b6100 a2=0 a3=0 items=0 ppid=2508 pid=12222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.644000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:24.651609 systemd-networkd[1681]: vethce3845d: Link DOWN Oct 27 13:26:24.659258 kernel: docker0: port 1(vethce3845d) entered disabled state Oct 27 13:26:24.659326 kernel: vethce3845d (unregistering): left allmulticast mode Oct 27 13:26:24.662589 kernel: vethce3845d (unregistering): left promiscuous mode Oct 27 13:26:24.650000 audit: ANOM_PROMISCUOUS dev=vethce3845d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:24.667032 kernel: docker0: port 1(vethce3845d) entered disabled state Oct 27 13:26:24.650000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1774b20 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.650000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:24.679047 systemd[1]: run-docker-netns-035917f36145.mount: Deactivated successfully. Oct 27 13:26:24.682154 systemd[1]: var-lib-docker-overlay2-5918e1d28d244271fd088d866a511d8f9bc00af22c0156d795604188a5b33523-merged.mount: Deactivated successfully. Oct 27 13:26:24.690000 audit: BPF prog-id=598 op=UNLOAD Oct 27 13:26:24.690000 audit: BPF prog-id=602 op=UNLOAD Oct 27 13:26:24.773252 systemd[1]: var-lib-docker-overlay2-8e514de8d46d7eeeb69fcfc34a260dee3c2d67124180bd050c84aeeb00bd2352\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:24.842557 containerd[1962]: time="2026-10-27T13:26:24.842517733Z" level=info msg="connecting to shim aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea" address="unix:///run/containerd/s/90f464e1b0f1acdc4d33292a5085f41c9d7ec52f3851327acc0ff62ff47eb53f" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:24.860278 systemd[1]: Started docker-aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea.scope - libcontainer container aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea. Oct 27 13:26:24.867000 audit: BPF prog-id=603 op=LOAD Oct 27 13:26:24.867000 audit: BPF prog-id=604 op=LOAD Oct 27 13:26:24.867000 audit[12251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2dc93cc9bf90 a2=98 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.867000 audit: BPF prog-id=604 op=UNLOAD Oct 27 13:26:24.867000 audit[12251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.867000 audit: BPF prog-id=605 op=LOAD Oct 27 13:26:24.867000 audit[12251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2dc93cc9c268 a2=98 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.868000 audit: BPF prog-id=606 op=LOAD Oct 27 13:26:24.868000 audit[12251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=2dc93cc9bfa8 a2=98 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.868000 audit: BPF prog-id=606 op=UNLOAD Oct 27 13:26:24.868000 audit[12251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.868000 audit: BPF prog-id=605 op=UNLOAD Oct 27 13:26:24.868000 audit[12251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.868000 audit: BPF prog-id=607 op=LOAD Oct 27 13:26:24.868000 audit[12251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2dc93cc9c4b8 a2=98 a3=0 items=0 ppid=12240 pid=12251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613836333835646261333833636438346531363932616166 Oct 27 13:26:24.887778 kernel: docker0: port 1(veth7fb4c62) entered blocking state Oct 27 13:26:24.887889 kernel: docker0: port 1(veth7fb4c62) entered disabled state Oct 27 13:26:24.890550 kernel: veth7fb4c62: entered allmulticast mode Oct 27 13:26:24.893503 kernel: veth7fb4c62: entered promiscuous mode Oct 27 13:26:24.879000 audit: ANOM_PROMISCUOUS dev=veth7fb4c62 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:24.879000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c121eae0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:24.895352 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:24.894000 audit[12275]: NETFILTER_CFG table=raw:263 family=2 entries=1 op=nft_register_rule pid=12275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:24.894000 audit[12275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc679c4f0 a2=0 a3=0 items=0 ppid=2508 pid=12275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:24.894000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:24.896624 systemd-networkd[1681]: veth7fb4c62: Link UP Oct 27 13:26:24.912763 kernel: eth0: renamed from vethd6ab2eb Oct 27 13:26:24.912843 kernel: docker0: port 1(veth7fb4c62) entered blocking state Oct 27 13:26:24.916183 kernel: docker0: port 1(veth7fb4c62) entered forwarding state Oct 27 13:26:24.916482 systemd-networkd[1681]: veth7fb4c62: Gained carrier Oct 27 13:26:24.917160 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:25.186488 sshd[12198]: Connection closed by authenticating user root 109.160.32.131 port 41288 [preauth] Oct 27 13:26:25.186000 audit[12198]: AUDIT1109 pid=12198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:25.189280 systemd[1]: sshd@58-23-10.0.0.24:22-109.160.32.131:41288.service: Deactivated successfully. Oct 27 13:26:25.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-23-10.0.0.24:22-109.160.32.131:41288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:25.947419 systemd[1]: docker-aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea.scope: Deactivated successfully. Oct 27 13:26:25.958917 containerd[1962]: time="2026-10-27T13:26:25.958878497Z" level=info msg="shim disconnected" id=aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea namespace=moby Oct 27 13:26:25.959688 containerd[1962]: time="2026-10-27T13:26:25.959139353Z" level=info msg="cleaning up after shim disconnected" id=aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea namespace=moby Oct 27 13:26:25.959688 containerd[1962]: time="2026-10-27T13:26:25.959153376Z" level=info msg="cleaning up dead shim" id=aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea namespace=moby Oct 27 13:26:25.959966 dockerd[2508]: time="2026-10-27T13:26:25.959799280Z" level=info msg="ignoring event" container=aa86385dba383cd84e1692aaf6bfb7d5a0b61744c11b68cad075beb54c8fb6ea module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:25.984132 kernel: docker0: port 1(veth7fb4c62) entered disabled state Oct 27 13:26:25.983769 systemd-networkd[1681]: veth7fb4c62: Lost carrier Oct 27 13:26:25.984475 kernel: vethd6ab2eb: renamed from eth0 Oct 27 13:26:25.998000 audit[12308]: NETFILTER_CFG table=raw:264 family=2 entries=1 op=nft_unregister_rule pid=12308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:25.998000 audit[12308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc2a88dd0 a2=0 a3=0 items=0 ppid=2508 pid=12308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:25.998000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:26.002565 systemd-networkd[1681]: veth7fb4c62: Link DOWN Oct 27 13:26:26.006313 kernel: docker0: port 1(veth7fb4c62) entered disabled state Oct 27 13:26:26.013942 kernel: veth7fb4c62 (unregistering): left allmulticast mode Oct 27 13:26:26.014015 kernel: veth7fb4c62 (unregistering): left promiscuous mode Oct 27 13:26:26.001000 audit: ANOM_PROMISCUOUS dev=veth7fb4c62 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:26.017666 kernel: docker0: port 1(veth7fb4c62) entered disabled state Oct 27 13:26:26.001000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159bb00 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.001000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:26.029505 systemd[1]: run-docker-netns-a227b22aee4b.mount: Deactivated successfully. Oct 27 13:26:26.033614 systemd[1]: var-lib-docker-overlay2-8e514de8d46d7eeeb69fcfc34a260dee3c2d67124180bd050c84aeeb00bd2352-merged.mount: Deactivated successfully. Oct 27 13:26:26.039000 audit: BPF prog-id=603 op=UNLOAD Oct 27 13:26:26.039000 audit: BPF prog-id=607 op=UNLOAD Oct 27 13:26:26.123763 systemd[1]: var-lib-docker-overlay2-995fa88b164d1d966ad2dda03c737d98f8b9e67928d8131bc3dfc015a7092f52\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:26.184569 containerd[1962]: time="2026-10-27T13:26:26.184528020Z" level=info msg="connecting to shim 44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5" address="unix:///run/containerd/s/58935674bb8fe41c0ffb46efdb9b1ac38d3945f3e9e0499bb594f2c352fe7992" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:26.206281 systemd[1]: Started docker-44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5.scope - libcontainer container 44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5. Oct 27 13:26:26.213000 audit: BPF prog-id=608 op=LOAD Oct 27 13:26:26.214000 audit: BPF prog-id=609 op=LOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=322fc8ca7f90 a2=98 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=609 op=UNLOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=610 op=LOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=322fc8ca8268 a2=98 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=611 op=LOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=322fc8ca7fa8 a2=98 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=611 op=UNLOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=610 op=UNLOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.214000 audit: BPF prog-id=612 op=LOAD Oct 27 13:26:26.214000 audit[12340]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=322fc8ca84b8 a2=98 a3=0 items=0 ppid=12328 pid=12340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346563643033666562646638613536303534666432623732 Oct 27 13:26:26.235223 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:26.239631 kernel: docker0: port 1(vethf04cb00) entered blocking state Oct 27 13:26:26.239720 kernel: docker0: port 1(vethf04cb00) entered disabled state Oct 27 13:26:26.243200 kernel: vethf04cb00: entered allmulticast mode Oct 27 13:26:26.246121 kernel: vethf04cb00: entered promiscuous mode Oct 27 13:26:26.229000 audit: ANOM_PROMISCUOUS dev=vethf04cb00 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:26.229000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b6450 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.229000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:26.248000 audit[12362]: NETFILTER_CFG table=raw:265 family=2 entries=1 op=nft_register_rule pid=12362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:26.248000 audit[12362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe96b0990 a2=0 a3=0 items=0 ppid=2508 pid=12362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:26.248000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:26.250679 systemd-networkd[1681]: vethf04cb00: Link UP Oct 27 13:26:26.265113 kernel: eth0: renamed from vethf88676f Oct 27 13:26:26.273875 kernel: docker0: port 1(vethf04cb00) entered blocking state Oct 27 13:26:26.273951 kernel: docker0: port 1(vethf04cb00) entered forwarding state Oct 27 13:26:26.274282 systemd-networkd[1681]: vethf04cb00: Gained carrier Oct 27 13:26:26.274654 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:27.298137 systemd[1]: docker-44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5.scope: Deactivated successfully. Oct 27 13:26:27.311867 dockerd[2508]: time="2026-10-27T13:26:27.311826318Z" level=info msg="ignoring event" container=44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:27.312394 containerd[1962]: time="2026-10-27T13:26:27.312251740Z" level=info msg="shim disconnected" id=44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5 namespace=moby Oct 27 13:26:27.312394 containerd[1962]: time="2026-10-27T13:26:27.312279194Z" level=info msg="cleaning up after shim disconnected" id=44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5 namespace=moby Oct 27 13:26:27.313130 containerd[1962]: time="2026-10-27T13:26:27.312284897Z" level=info msg="cleaning up dead shim" id=44ecd03febdf8a56054fd2b7279453f3b587e99ada5051a325732d385724bfa5 namespace=moby Oct 27 13:26:27.335993 kernel: docker0: port 1(vethf04cb00) entered disabled state Oct 27 13:26:27.334245 systemd-networkd[1681]: vethf04cb00: Lost carrier Oct 27 13:26:27.336351 kernel: vethf88676f: renamed from eth0 Oct 27 13:26:27.353000 audit[12390]: NETFILTER_CFG table=raw:266 family=2 entries=1 op=nft_unregister_rule pid=12390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:27.358265 kernel: kauditd_printk_skb: 139 callbacks suppressed Oct 27 13:26:27.358318 kernel: audit: type=1325 audit(1793107587.353:2053): table=raw:266 family=2 entries=1 op=nft_unregister_rule pid=12390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:27.353000 audit[12390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe2da6230 a2=0 a3=0 items=0 ppid=2508 pid=12390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.384721 kernel: audit: type=1300 audit(1793107587.353:2053): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe2da6230 a2=0 a3=0 items=0 ppid=2508 pid=12390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.353000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:27.396643 kernel: audit: type=1327 audit(1793107587.353:2053): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:27.397476 systemd-networkd[1681]: vethf04cb00: Link DOWN Oct 27 13:26:27.400626 kernel: docker0: port 1(vethf04cb00) entered disabled state Oct 27 13:26:27.404316 kernel: vethf04cb00 (unregistering): left allmulticast mode Oct 27 13:26:27.408156 kernel: vethf04cb00 (unregistering): left promiscuous mode Oct 27 13:26:27.396000 audit: ANOM_PROMISCUOUS dev=vethf04cb00 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:27.412743 kernel: docker0: port 1(vethf04cb00) entered disabled state Oct 27 13:26:27.412768 kernel: audit: type=1700 audit(1793107587.396:2054): dev=vethf04cb00 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:27.396000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a22e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.432320 systemd[1]: run-docker-netns-ea45fa2a432f.mount: Deactivated successfully. Oct 27 13:26:27.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:27.450226 systemd[1]: var-lib-docker-overlay2-995fa88b164d1d966ad2dda03c737d98f8b9e67928d8131bc3dfc015a7092f52-merged.mount: Deactivated successfully. Oct 27 13:26:27.461304 kernel: audit: type=1300 audit(1793107587.396:2054): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c16a22e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.461361 kernel: audit: type=1327 audit(1793107587.396:2054): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:27.470000 audit: BPF prog-id=608 op=UNLOAD Oct 27 13:26:27.470000 audit: BPF prog-id=612 op=UNLOAD Oct 27 13:26:27.479656 kernel: audit: type=1334 audit(1793107587.470:2055): prog-id=608 op=UNLOAD Oct 27 13:26:27.479739 kernel: audit: type=1334 audit(1793107587.470:2056): prog-id=612 op=UNLOAD Oct 27 13:26:27.524630 systemd[1]: var-lib-docker-overlay2-9cc6da822885ef10ab12c2c339121418dcab09d4dd0a6801d70fd437694c3cd5\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:27.593357 containerd[1962]: time="2026-10-27T13:26:27.593219636Z" level=info msg="connecting to shim 58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d" address="unix:///run/containerd/s/45765f87068de275b2f2943fb79f4514befd60bb1759b688f7e840636b526f5b" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:27.609264 systemd[1]: Started docker-58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d.scope - libcontainer container 58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d. Oct 27 13:26:27.617000 audit: BPF prog-id=613 op=LOAD Oct 27 13:26:27.622000 audit: BPF prog-id=614 op=LOAD Oct 27 13:26:27.627733 kernel: audit: type=1334 audit(1793107587.617:2057): prog-id=613 op=LOAD Oct 27 13:26:27.627799 kernel: audit: type=1334 audit(1793107587.622:2058): prog-id=614 op=LOAD Oct 27 13:26:27.622000 audit[12420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4d71da739f90 a2=98 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=614 op=UNLOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=615 op=LOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4d71da73a268 a2=98 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=616 op=LOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=4d71da739fa8 a2=98 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=616 op=UNLOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=615 op=UNLOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.627000 audit: BPF prog-id=617 op=LOAD Oct 27 13:26:27.627000 audit[12420]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4d71da73a4b8 a2=98 a3=0 items=0 ppid=12407 pid=12420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35386362363534303263353761656666326430353033616536 Oct 27 13:26:27.647890 kernel: docker0: port 1(veth8e2b239) entered blocking state Oct 27 13:26:27.647988 kernel: docker0: port 1(veth8e2b239) entered disabled state Oct 27 13:26:27.650799 kernel: veth8e2b239: entered allmulticast mode Oct 27 13:26:27.653637 kernel: veth8e2b239: entered promiscuous mode Oct 27 13:26:27.638000 audit: ANOM_PROMISCUOUS dev=veth8e2b239 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:27.638000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c12b7ef0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.638000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:27.655758 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:27.659000 audit[12440]: NETFILTER_CFG table=raw:267 family=2 entries=1 op=nft_register_rule pid=12440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:27.659000 audit[12440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffc291e00 a2=0 a3=0 items=0 ppid=2508 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:27.659000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:27.661847 systemd-networkd[1681]: veth8e2b239: Link UP Oct 27 13:26:27.676119 kernel: eth0: renamed from vethf270978 Oct 27 13:26:27.683103 kernel: docker0: port 1(veth8e2b239) entered blocking state Oct 27 13:26:27.683178 kernel: docker0: port 1(veth8e2b239) entered forwarding state Oct 27 13:26:27.683684 systemd-networkd[1681]: veth8e2b239: Gained carrier Oct 27 13:26:27.685335 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:28.710795 systemd[1]: docker-58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d.scope: Deactivated successfully. Oct 27 13:26:28.723458 dockerd[2508]: time="2026-10-27T13:26:28.723417395Z" level=info msg="ignoring event" container=58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:28.724461 containerd[1962]: time="2026-10-27T13:26:28.723760958Z" level=info msg="shim disconnected" id=58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d namespace=moby Oct 27 13:26:28.724461 containerd[1962]: time="2026-10-27T13:26:28.723787916Z" level=info msg="cleaning up after shim disconnected" id=58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d namespace=moby Oct 27 13:26:28.724461 containerd[1962]: time="2026-10-27T13:26:28.723793764Z" level=info msg="cleaning up dead shim" id=58cb65402c57aeff2d0503ae6afadcb29b478bdeedd8702f0efb7773c05ebf0d namespace=moby Oct 27 13:26:28.731256 systemd-networkd[1681]: veth8e2b239: Gained IPv6LL Oct 27 13:26:28.746133 kernel: docker0: port 1(veth8e2b239) entered disabled state Oct 27 13:26:28.746230 kernel: vethf270978: renamed from eth0 Oct 27 13:26:28.746319 systemd-networkd[1681]: veth8e2b239: Lost carrier Oct 27 13:26:28.768000 audit[12469]: NETFILTER_CFG table=raw:268 family=2 entries=1 op=nft_unregister_rule pid=12469 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:28.768000 audit[12469]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7033100 a2=0 a3=0 items=0 ppid=2508 pid=12469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:28.768000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:28.779565 systemd-networkd[1681]: veth8e2b239: Link DOWN Oct 27 13:26:28.783117 kernel: docker0: port 1(veth8e2b239) entered disabled state Oct 27 13:26:28.790432 kernel: veth8e2b239 (unregistering): left allmulticast mode Oct 27 13:26:28.790506 kernel: veth8e2b239 (unregistering): left promiscuous mode Oct 27 13:26:28.778000 audit: ANOM_PROMISCUOUS dev=veth8e2b239 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:28.793858 kernel: docker0: port 1(veth8e2b239) entered disabled state Oct 27 13:26:28.778000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c19cf2e0 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:28.778000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:28.800977 systemd[1]: run-docker-netns-f6677ea3c170.mount: Deactivated successfully. Oct 27 13:26:28.804786 systemd[1]: var-lib-docker-overlay2-9cc6da822885ef10ab12c2c339121418dcab09d4dd0a6801d70fd437694c3cd5-merged.mount: Deactivated successfully. Oct 27 13:26:28.813000 audit: BPF prog-id=613 op=UNLOAD Oct 27 13:26:28.813000 audit: BPF prog-id=617 op=UNLOAD Oct 27 13:26:28.982161 sshd[4201]: Connection closed by 20.31.226.197 port 45258 Oct 27 13:26:28.983845 sshd-session[4197]: pam_unix(sshd:session): session closed for user core Oct 27 13:26:28.983000 audit[4197]: AUDIT1106 pid=4197 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:28.983000 audit[4197]: AUDIT1104 pid=4197 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:28.987471 systemd[1]: sshd@34-4120-10.0.0.24:22-20.31.226.197:45258.service: Deactivated successfully. Oct 27 13:26:28.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-4120-10.0.0.24:22-20.31.226.197:45258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:28.990940 systemd[1]: session-27.scope: Deactivated successfully. Oct 27 13:26:28.991457 systemd[1]: session-27.scope: Consumed 1.289s CPU time over 2min 17.283s wall clock time, 16.7M memory peak. Oct 27 13:26:28.992399 systemd-logind[1931]: Session 27 logged out. Waiting for processes to exit. Oct 27 13:26:28.993947 systemd-logind[1931]: Removed session 27. Oct 27 13:26:29.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4133-10.0.0.24:22-20.31.226.197:48846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:29.134385 systemd[1]: Started sshd@59-4133-10.0.0.24:22-20.31.226.197:48846.service - OpenSSH per-connection server daemon (20.31.226.197:48846). Oct 27 13:26:29.755405 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:29.853000 audit[12474]: AUDIT1101 pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:29.854405 sshd[12474]: Accepted publickey for core from 20.31.226.197 port 48846 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:26:29.854000 audit[12474]: AUDIT1103 pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:29.854000 audit[12474]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe999f5d0 a2=3 a3=0 items=0 ppid=1 pid=12474 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:29.854000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:26:29.855566 sshd-session[12474]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:26:29.859987 systemd-logind[1931]: New session '28' of user 'core' with class 'user' and type 'tty'. Oct 27 13:26:29.870289 systemd[1]: Started session-28.scope - Session 28 of User core. Oct 27 13:26:29.872000 audit[12474]: AUDIT1105 pid=12474 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:29.873000 audit[12478]: AUDIT1103 pid=12478 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:30.138068 sudo[12483]: core : PWD=/tmp/tmp.OySbvI9mvb ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls Oct 27 13:26:30.138314 sudo[12483]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:26:30.136000 audit[12483]: AUDIT1101 pid=12483 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.137000 audit[12483]: AUDIT1110 pid=12483 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.137000 audit[12483]: AUDIT1105 pid=12483 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.191119 sudo[12483]: pam_unix(sudo:session): session closed for user root Oct 27 13:26:30.190000 audit[12483]: AUDIT1106 pid=12483 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.190000 audit[12483]: AUDIT1104 pid=12483 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.196000 audit[12508]: AUDIT1101 pid=12508 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.196000 audit[12508]: AUDIT1110 pid=12508 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.196000 audit[12508]: AUDIT1105 pid=12508 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.197758 sudo[12508]: core : PWD=/tmp/tmp.OySbvI9mvb ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libpcre2-8.so.0 /lib64/libreadline.so.8 /lib64/libselinux.so.1 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Oct 27 13:26:30.197980 sudo[12508]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:26:30.249594 sudo[12508]: pam_unix(sudo:session): session closed for user root Oct 27 13:26:30.248000 audit[12508]: AUDIT1106 pid=12508 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.248000 audit[12508]: AUDIT1104 pid=12508 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.254000 audit[12479]: AUDIT1101 pid=12479 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.255726 sudo[12479]: core : PWD=/tmp/tmp.OySbvI9mvb ; USER=root ; COMMAND=/usr/sbin/docker build -t captest . Oct 27 13:26:30.255000 audit[12479]: AUDIT1110 pid=12479 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.256483 sudo[12479]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Oct 27 13:26:30.255000 audit[12479]: AUDIT1105 pid=12479 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4134-10.0.0.24:22-109.160.32.131:41350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.280746 systemd[1]: Started sshd@60-4134-10.0.0.24:22-109.160.32.131:41350.service - OpenSSH per-connection server daemon (109.160.32.131:41350). Oct 27 13:26:30.737620 sudo[12479]: pam_unix(sudo:session): session closed for user root Oct 27 13:26:30.736000 audit[12479]: AUDIT1106 pid=12479 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.737000 audit[12479]: AUDIT1104 pid=12479 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.875210 sshd[12478]: Connection closed by 20.31.226.197 port 48846 Oct 27 13:26:30.875805 sshd-session[12474]: pam_unix(sshd:session): session closed for user core Oct 27 13:26:30.875000 audit[12474]: AUDIT1106 pid=12474 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:30.875000 audit[12474]: AUDIT1104 pid=12474 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:30.879144 systemd[1]: sshd@59-4133-10.0.0.24:22-20.31.226.197:48846.service: Deactivated successfully. Oct 27 13:26:30.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-4133-10.0.0.24:22-20.31.226.197:48846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:30.881137 systemd[1]: session-28.scope: Deactivated successfully. Oct 27 13:26:30.882002 systemd-logind[1931]: Session 28 logged out. Waiting for processes to exit. Oct 27 13:26:30.883439 systemd-logind[1931]: Removed session 28. Oct 27 13:26:31.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-24-10.0.0.24:22-20.31.226.197:54388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:31.027787 systemd[1]: Started sshd@61-24-10.0.0.24:22-20.31.226.197:54388.service - OpenSSH per-connection server daemon (20.31.226.197:54388). Oct 27 13:26:31.032456 sshd[12528]: Connection closed by authenticating user root 109.160.32.131 port 41350 [preauth] Oct 27 13:26:31.031000 audit[12528]: AUDIT1109 pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:31.034192 systemd[1]: sshd@60-4134-10.0.0.24:22-109.160.32.131:41350.service: Deactivated successfully. Oct 27 13:26:31.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-4134-10.0.0.24:22-109.160.32.131:41350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:31.406561 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount1390285002.mount: Deactivated successfully. Oct 27 13:26:31.760000 audit[12576]: AUDIT1101 pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:31.761625 sshd[12576]: Accepted publickey for core from 20.31.226.197 port 54388 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:26:31.761000 audit[12576]: AUDIT1103 pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:31.761000 audit[12576]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe44f7bf0 a2=3 a3=0 items=0 ppid=1 pid=12576 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:31.761000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:26:31.762691 sshd-session[12576]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:26:31.767815 systemd-logind[1931]: New session '29' of user 'core' with class 'user' and type 'tty'. Oct 27 13:26:31.774422 systemd[1]: Started session-29.scope - Session 29 of User core. Oct 27 13:26:31.775000 audit[12576]: AUDIT1105 pid=12576 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:31.777000 audit[12582]: AUDIT1103 pid=12582 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:32.065966 systemd[1]: var-lib-docker-overlay2-c3be1ccac138074d6e96e5b6826eac5ca4880366449c5959b25140a0ee884360\x2dinit-merged.mount: Deactivated successfully. Oct 27 13:26:32.188448 systemd[1]: var-lib-docker-overlay2-c3be1ccac138074d6e96e5b6826eac5ca4880366449c5959b25140a0ee884360-merged.mount: Deactivated successfully. Oct 27 13:26:32.231638 containerd[1962]: time="2026-10-27T13:26:32.231561170Z" level=info msg="connecting to shim 2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7" address="unix:///run/containerd/s/0fd541db9313d164dc7da2c2dc77fcfff2f4624fb3d3ee6fcf55b4f720591675" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:32.248280 systemd[1]: Started docker-2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7.scope - libcontainer container 2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7. Oct 27 13:26:32.259000 audit: BPF prog-id=618 op=LOAD Oct 27 13:26:32.260000 audit: BPF prog-id=619 op=LOAD Oct 27 13:26:32.260000 audit[12610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2d6c752b1f90 a2=98 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.260000 audit: BPF prog-id=619 op=UNLOAD Oct 27 13:26:32.260000 audit[12610]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.260000 audit: BPF prog-id=620 op=LOAD Oct 27 13:26:32.260000 audit[12610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2d6c752b2268 a2=98 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.260000 audit: BPF prog-id=621 op=LOAD Oct 27 13:26:32.260000 audit[12610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=2d6c752b1fa8 a2=98 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.261000 audit: BPF prog-id=621 op=UNLOAD Oct 27 13:26:32.261000 audit[12610]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.261000 audit: BPF prog-id=620 op=UNLOAD Oct 27 13:26:32.261000 audit[12610]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.261000 audit: BPF prog-id=622 op=LOAD Oct 27 13:26:32.261000 audit[12610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2d6c752b24b8 a2=98 a3=0 items=0 ppid=12598 pid=12610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32663636346332623335653464353064353637626265343965 Oct 27 13:26:32.285778 kernel: docker0: port 1(vethb712c3f) entered blocking state Oct 27 13:26:32.285886 kernel: docker0: port 1(vethb712c3f) entered disabled state Oct 27 13:26:32.288647 kernel: vethb712c3f: entered allmulticast mode Oct 27 13:26:32.291416 kernel: vethb712c3f: entered promiscuous mode Oct 27 13:26:32.274000 audit: ANOM_PROMISCUOUS dev=vethb712c3f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:32.274000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c20464b0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.274000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:32.294000 audit[12632]: NETFILTER_CFG table=raw:269 family=2 entries=1 op=nft_register_rule pid=12632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:32.294000 audit[12632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff27be940 a2=0 a3=0 items=0 ppid=2508 pid=12632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.294000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:32.298899 systemd-networkd[1681]: vethb712c3f: Link UP Oct 27 13:26:32.312124 kernel: eth0: renamed from vethd0fab6e Oct 27 13:26:32.319641 kernel: docker0: port 1(vethb712c3f) entered blocking state Oct 27 13:26:32.319700 kernel: docker0: port 1(vethb712c3f) entered forwarding state Oct 27 13:26:32.319834 systemd-networkd[1681]: vethb712c3f: Gained carrier Oct 27 13:26:32.320057 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:32.350125 systemd[1]: docker-2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7.scope: Deactivated successfully. Oct 27 13:26:32.366124 dockerd[2508]: time="2026-10-27T13:26:32.366037242Z" level=info msg="ignoring event" container=2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:32.366803 containerd[1962]: time="2026-10-27T13:26:32.366586703Z" level=info msg="shim disconnected" id=2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7 namespace=moby Oct 27 13:26:32.366803 containerd[1962]: time="2026-10-27T13:26:32.366615990Z" level=info msg="cleaning up after shim disconnected" id=2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7 namespace=moby Oct 27 13:26:32.366803 containerd[1962]: time="2026-10-27T13:26:32.366621701Z" level=info msg="cleaning up dead shim" id=2f664c2b35e4d50d567bbe49e857da186871753c60cf73630214b529e6756fd7 namespace=moby Oct 27 13:26:32.387431 kernel: docker0: port 1(vethb712c3f) entered disabled state Oct 27 13:26:32.387181 systemd-networkd[1681]: vethb712c3f: Lost carrier Oct 27 13:26:32.390113 kernel: vethd0fab6e: renamed from eth0 Oct 27 13:26:32.401000 audit[12667]: NETFILTER_CFG table=raw:270 family=2 entries=1 op=nft_unregister_rule pid=12667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:32.405643 kernel: kauditd_printk_skb: 102 callbacks suppressed Oct 27 13:26:32.405710 kernel: audit: type=1325 audit(1793107592.401:2117): table=raw:270 family=2 entries=1 op=nft_unregister_rule pid=12667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:32.401000 audit[12667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffc858a80 a2=0 a3=0 items=0 ppid=2508 pid=12667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.431220 kernel: audit: type=1300 audit(1793107592.401:2117): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffc858a80 a2=0 a3=0 items=0 ppid=2508 pid=12667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:32.442595 kernel: audit: type=1327 audit(1793107592.401:2117): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:32.443337 systemd-networkd[1681]: vethb712c3f: Link DOWN Oct 27 13:26:32.450042 kernel: docker0: port 1(vethb712c3f) entered disabled state Oct 27 13:26:32.450134 kernel: vethb712c3f (unregistering): left allmulticast mode Oct 27 13:26:32.430000 audit: ANOM_PROMISCUOUS dev=vethb712c3f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:32.458581 kernel: vethb712c3f (unregistering): left promiscuous mode Oct 27 13:26:32.458618 kernel: docker0: port 1(vethb712c3f) entered disabled state Oct 27 13:26:32.458631 kernel: audit: type=1700 audit(1793107592.430:2118): dev=vethb712c3f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:32.430000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ae60 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:32.508406 kernel: audit: type=1300 audit(1793107592.430:2118): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c159ae60 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:32.508474 kernel: audit: type=1327 audit(1793107592.430:2118): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:32.510951 systemd[1]: run-docker-netns-932d3b98b6f2.mount: Deactivated successfully. Oct 27 13:26:32.514453 systemd[1]: var-lib-docker-overlay2-c3be1ccac138074d6e96e5b6826eac5ca4880366449c5959b25140a0ee884360-merged.mount: Deactivated successfully. Oct 27 13:26:32.520000 audit: BPF prog-id=618 op=UNLOAD Oct 27 13:26:32.520000 audit: BPF prog-id=622 op=UNLOAD Oct 27 13:26:32.566388 kernel: audit: type=1334 audit(1793107592.520:2119): prog-id=618 op=UNLOAD Oct 27 13:26:32.566436 kernel: audit: type=1334 audit(1793107592.520:2120): prog-id=622 op=UNLOAD Oct 27 13:26:32.718114 sshd[12582]: Connection closed by 20.31.226.197 port 54388 Oct 27 13:26:32.717945 sshd-session[12576]: pam_unix(sshd:session): session closed for user core Oct 27 13:26:32.717000 audit[12576]: AUDIT1106 pid=12576 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:32.723977 systemd[1]: sshd@61-24-10.0.0.24:22-20.31.226.197:54388.service: Deactivated successfully. Oct 27 13:26:32.726353 systemd[1]: session-29.scope: Deactivated successfully. Oct 27 13:26:32.728948 systemd-logind[1931]: Session 29 logged out. Waiting for processes to exit. Oct 27 13:26:32.731020 systemd-logind[1931]: Removed session 29. Oct 27 13:26:32.717000 audit[12576]: AUDIT1104 pid=12576 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:32.751663 kernel: audit: type=1106 audit(1793107592.717:2121): pid=12576 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:32.751716 kernel: audit: type=1104 audit(1793107592.717:2122): pid=12576 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:32.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-24-10.0.0.24:22-20.31.226.197:54388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:32.867610 systemd[1]: Started sshd@62-25-10.0.0.24:22-20.31.226.197:54398.service - OpenSSH per-connection server daemon (20.31.226.197:54398). Oct 27 13:26:32.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-25-10.0.0.24:22-20.31.226.197:54398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:33.275657 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:33.594000 audit[12672]: AUDIT1101 pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:33.596078 sshd[12672]: Accepted publickey for core from 20.31.226.197 port 54398 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:26:33.595000 audit[12672]: AUDIT1103 pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:33.595000 audit[12672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd9313100 a2=3 a3=0 items=0 ppid=1 pid=12672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:33.595000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:26:33.597696 sshd-session[12672]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:26:33.602192 systemd-logind[1931]: New session '30' of user 'core' with class 'user' and type 'tty'. Oct 27 13:26:33.610323 systemd[1]: Started session-30.scope - Session 30 of User core. Oct 27 13:26:33.611000 audit[12672]: AUDIT1105 pid=12672 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:33.613000 audit[12676]: AUDIT1103 pid=12676 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:35.544238 systemd[1]: Started sshd@63-26-10.0.0.24:22-109.160.32.131:35412.service - OpenSSH per-connection server daemon (109.160.32.131:35412). Oct 27 13:26:35.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-26-10.0.0.24:22-109.160.32.131:35412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:36.204346 sshd[12689]: Invalid user tom from 109.160.32.131 port 35412 Oct 27 13:26:36.409015 sshd[12689]: Connection closed by invalid user tom 109.160.32.131 port 35412 [preauth] Oct 27 13:26:36.409000 audit[12689]: AUDIT1109 pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:36.411862 systemd[1]: sshd@63-26-10.0.0.24:22-109.160.32.131:35412.service: Deactivated successfully. Oct 27 13:26:36.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-26-10.0.0.24:22-109.160.32.131:35412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:36.887211 systemd[1]: var-lib-docker-overlay2-3fea2a9819edd14160185649b139f61da202d947eb483b50f38b1bdda1ed1ce7-merged.mount: Deactivated successfully. Oct 27 13:26:38.260628 systemd[1]: var-lib-docker-overlay2-27e1a8fc9c18c1c25d05605c055cf15c9a72322eb59dec4242d89bd179b99e84-merged.mount: Deactivated successfully. Oct 27 13:26:38.304608 systemd[1]: var-lib-docker-overlay2-1f22695033689c520cffa714c1552fcd1ccf43124e76ce66998011fc10530c7b-merged.mount: Deactivated successfully. Oct 27 13:26:38.590176 containerd[1962]: time="2026-10-27T13:26:38.590087073Z" level=info msg="connecting to shim cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da" address="unix:///run/containerd/s/491023d53cc1bb1e6dbfea9719b22369f56f455b2eed5d22025d37e144427648" namespace=moby protocol=ttrpc version=3 Oct 27 13:26:38.610266 systemd[1]: Started docker-cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da.scope - libcontainer container cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da. Oct 27 13:26:38.617000 audit: BPF prog-id=623 op=LOAD Oct 27 13:26:38.621763 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 27 13:26:38.621822 kernel: audit: type=1334 audit(1793107598.617:2133): prog-id=623 op=LOAD Oct 27 13:26:38.625000 audit: BPF prog-id=624 op=LOAD Oct 27 13:26:38.630344 kernel: audit: type=1334 audit(1793107598.625:2134): prog-id=624 op=LOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79bb2cea9f90 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.647934 kernel: audit: type=1300 audit(1793107598.625:2134): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79bb2cea9f90 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.663863 kernel: audit: type=1327 audit(1793107598.625:2134): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=624 op=UNLOAD Oct 27 13:26:38.668833 kernel: audit: type=1334 audit(1793107598.625:2135): prog-id=624 op=UNLOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.685016 kernel: audit: type=1300 audit(1793107598.625:2135): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.701485 kernel: audit: type=1327 audit(1793107598.625:2135): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=625 op=LOAD Oct 27 13:26:38.706220 kernel: audit: type=1334 audit(1793107598.625:2136): prog-id=625 op=LOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79bb2ceaa268 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.722914 kernel: audit: type=1300 audit(1793107598.625:2136): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79bb2ceaa268 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.739121 kernel: audit: type=1327 audit(1793107598.625:2136): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=626 op=LOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=79bb2cea9fa8 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=626 op=UNLOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=625 op=UNLOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.625000 audit: BPF prog-id=627 op=LOAD Oct 27 13:26:38.625000 audit[12739]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=79bb2ceaa4b8 a2=98 a3=0 items=0 ppid=12728 pid=12739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63666233333532353162333130613564396661646466383465 Oct 27 13:26:38.753518 kernel: docker0: port 1(vethf91859c) entered blocking state Oct 27 13:26:38.753579 kernel: docker0: port 1(vethf91859c) entered disabled state Oct 27 13:26:38.757001 kernel: vethf91859c: entered allmulticast mode Oct 27 13:26:38.759807 kernel: vethf91859c: entered promiscuous mode Oct 27 13:26:38.744000 audit: ANOM_PROMISCUOUS dev=vethf91859c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:38.744000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=3c4c0b9bcb0 a2=28 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.744000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:38.761000 audit[12761]: NETFILTER_CFG table=raw:271 family=2 entries=1 op=nft_register_rule pid=12761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:38.761000 audit[12761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffccce5ea0 a2=0 a3=0 items=0 ppid=2508 pid=12761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.761000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:38.762947 systemd-networkd[1681]: vethf91859c: Link UP Oct 27 13:26:38.777116 kernel: eth0: renamed from vethc0c49da Oct 27 13:26:38.777205 kernel: docker0: port 1(vethf91859c) entered blocking state Oct 27 13:26:38.783087 kernel: docker0: port 1(vethf91859c) entered forwarding state Oct 27 13:26:38.783638 systemd-networkd[1681]: vethf91859c: Gained carrier Oct 27 13:26:38.783896 systemd-networkd[1681]: docker0: Gained carrier Oct 27 13:26:38.805674 systemd[1]: docker-cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da.scope: Deactivated successfully. Oct 27 13:26:38.823952 dockerd[2508]: time="2026-10-27T13:26:38.823893438Z" level=info msg="ignoring event" container=cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Oct 27 13:26:38.824468 containerd[1962]: time="2026-10-27T13:26:38.823962842Z" level=info msg="shim disconnected" id=cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da namespace=moby Oct 27 13:26:38.824468 containerd[1962]: time="2026-10-27T13:26:38.823990168Z" level=info msg="cleaning up after shim disconnected" id=cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da namespace=moby Oct 27 13:26:38.824468 containerd[1962]: time="2026-10-27T13:26:38.823995976Z" level=info msg="cleaning up dead shim" id=cfb335251b310a5d9faddf84e200ebc094ec47e3c75328aff4fa7bdb2fb185da namespace=moby Oct 27 13:26:38.844560 systemd-networkd[1681]: vethf91859c: Lost carrier Oct 27 13:26:38.845236 kernel: docker0: port 1(vethf91859c) entered disabled state Oct 27 13:26:38.845266 kernel: vethc0c49da: renamed from eth0 Oct 27 13:26:38.859000 audit[12793]: NETFILTER_CFG table=raw:272 family=2 entries=1 op=nft_unregister_rule pid=12793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 27 13:26:38.859000 audit[12793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcec49df0 a2=0 a3=0 items=0 ppid=2508 pid=12793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.859000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Oct 27 13:26:38.864596 systemd-networkd[1681]: vethf91859c: Link DOWN Oct 27 13:26:38.872055 kernel: docker0: port 1(vethf91859c) entered disabled state Oct 27 13:26:38.872140 kernel: vethf91859c (unregistering): left allmulticast mode Oct 27 13:26:38.875909 kernel: vethf91859c (unregistering): left promiscuous mode Oct 27 13:26:38.863000 audit: ANOM_PROMISCUOUS dev=vethf91859c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Oct 27 13:26:38.879998 kernel: docker0: port 1(vethf91859c) entered disabled state Oct 27 13:26:38.863000 audit[2508]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=3c4c1fd0660 a2=20 a3=0 items=0 ppid=1 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:38.863000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Oct 27 13:26:38.906000 audit: BPF prog-id=623 op=UNLOAD Oct 27 13:26:38.906000 audit: BPF prog-id=627 op=UNLOAD Oct 27 13:26:39.070178 sshd[12676]: Connection closed by 20.31.226.197 port 54398 Oct 27 13:26:39.070081 sshd-session[12672]: pam_unix(sshd:session): session closed for user core Oct 27 13:26:39.070000 audit[12672]: AUDIT1106 pid=12672 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:39.070000 audit[12672]: AUDIT1104 pid=12672 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:39.073343 systemd[1]: sshd@62-25-10.0.0.24:22-20.31.226.197:54398.service: Deactivated successfully. Oct 27 13:26:39.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-25-10.0.0.24:22-20.31.226.197:54398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:39.075366 systemd[1]: session-30.scope: Deactivated successfully. Oct 27 13:26:39.076945 systemd-logind[1931]: Session 30 logged out. Waiting for processes to exit. Oct 27 13:26:39.078463 systemd-logind[1931]: Removed session 30. Oct 27 13:26:39.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-27-10.0.0.24:22-20.31.226.197:54406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:39.232172 systemd[1]: Started sshd@64-27-10.0.0.24:22-20.31.226.197:54406.service - OpenSSH per-connection server daemon (20.31.226.197:54406). Oct 27 13:26:39.255799 systemd[1]: var-lib-docker-overlay2-9d8d3ffaff209a6891b82b28a34fbe212d394cae65376ee01d290cee50314ff5-merged.mount: Deactivated successfully. Oct 27 13:26:39.803366 systemd-networkd[1681]: docker0: Lost carrier Oct 27 13:26:39.989000 audit[12798]: AUDIT1101 pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:39.990824 sshd[12798]: Accepted publickey for core from 20.31.226.197 port 54406 ssh2: RSA SHA256:BsNRVxk0Df/l+k97auxGU824qvUiIgxS1Xr4X1U/2b4 Oct 27 13:26:39.990000 audit[12798]: AUDIT1103 pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:39.990000 audit[12798]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcf997ed0 a2=3 a3=0 items=0 ppid=1 pid=12798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 27 13:26:39.990000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Oct 27 13:26:39.992306 sshd-session[12798]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Oct 27 13:26:39.996601 systemd-logind[1931]: New session '31' of user 'core' with class 'user' and type 'tty'. Oct 27 13:26:40.002235 systemd[1]: Started session-31.scope - Session 31 of User core. Oct 27 13:26:40.003000 audit[12798]: AUDIT1105 pid=12798 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:40.005000 audit[12802]: AUDIT1103 pid=12802 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:40.930920 systemd[1]: Started sshd@65-4135-10.0.0.24:22-109.160.32.131:45830.service - OpenSSH per-connection server daemon (109.160.32.131:45830). Oct 27 13:26:40.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-4135-10.0.0.24:22-109.160.32.131:45830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:41.218336 systemd[1]: var-lib-docker-overlay2-e95c6085dcd6ead4d0f2642f1bc6362c09dd4997958c7165d2e7e2196f544649-merged.mount: Deactivated successfully. Oct 27 13:26:41.417589 sshd[12802]: Connection closed by 20.31.226.197 port 54406 Oct 27 13:26:41.418404 sshd-session[12798]: pam_unix(sshd:session): session closed for user core Oct 27 13:26:41.417000 audit[12798]: AUDIT1106 pid=12798 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:41.417000 audit[12798]: AUDIT1104 pid=12798 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.31.226.197 addr=20.31.226.197 terminal=ssh res=success' Oct 27 13:26:41.421519 systemd[1]: sshd@64-27-10.0.0.24:22-20.31.226.197:54406.service: Deactivated successfully. Oct 27 13:26:41.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-27-10.0.0.24:22-20.31.226.197:54406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 27 13:26:41.424580 systemd[1]: session-31.scope: Deactivated successfully. Oct 27 13:26:41.425737 systemd-logind[1931]: Session 31 logged out. Waiting for processes to exit. Oct 27 13:26:41.427685 systemd-logind[1931]: Removed session 31. Oct 27 13:26:41.931408 sshd[12814]: Invalid user minecraft from 109.160.32.131 port 45830 Oct 27 13:26:42.236367 sshd[12814]: Connection closed by invalid user minecraft 109.160.32.131 port 45830 [preauth] Oct 27 13:26:42.235000 audit[12814]: AUDIT1109 pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=109.160.32.131 addr=109.160.32.131 terminal=ssh res=failed' Oct 27 13:26:42.237701 systemd[1]: sshd@65-4135-10.0.0.24:22-109.160.32.131:45830.service: Deactivated successfully. Oct 27 13:26:42.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-4135-10.0.0.24:22-109.160.32.131:45830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'