.936:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.152628] audit: type=1130 audit(1784612565.059:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.157487] audit: type=1334 audit(1784612565.059:152): prog-id=7 op=UNLOAD [ 21.157552] audit: type=1334 audit(1784612565.059:153): prog-id=6 op=UNLOAD [ 21.157593] audit: type=1334 audit(1784612565.059:154): prog-id=32 op=LOAD [ 21.157637] audit: type=1334 audit(1784612565.059:155): prog-id=33 op=LOAD [ 21.568080] audit: type=1130 audit(1784612565.474:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.576075] audit: type=1334 audit(1784612565.475:157): prog-id=34 op=LOAD [ 21.708193] audit: type=1130 audit(1784612565.615:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.890405] mousedev: PS/2 mouse device common for all mice [ 21.941298] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 21.978729] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 21.986074] ACPI: button: Power Button [PWRF] [ 21.988219] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 21.989852] ACPI: button: Sleep Button [SLPF] [ 22.495472] erofs: (device dm-5): mounted with root inode @ nid 40. [ 22.521466] loop6: detected capacity change from 0 to 44152 [ 22.524702] loop6: p1 p2 p3 [ 22.532754] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.532760] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.535703] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.535707] device-mapper: ioctl: error adding target to table [ 22.537834] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.560894] erofs: (device dm-5): mounted with root inode @ nid 40. [ 22.594682] loop6: detected capacity change from 0 to 300096 [ 22.599880] loop6: p1 p2 p3 [ 22.611875] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.613001] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.614454] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.615816] device-mapper: ioctl: error adding target to table [ 22.623596] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.653322] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.673888] loop6: detected capacity change from 0 to 388272 [ 22.676610] loop6: p1 p2 p3 [ 22.689817] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.690989] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.694698] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.696342] device-mapper: ioctl: error adding target to table [ 22.698791] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.751495] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.775126] loop6: detected capacity change from 0 to 183704 [ 22.779679] loop6: p1 p2 p3 [ 22.789238] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.790360] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.791808] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.793302] device-mapper: ioctl: error adding target to table [ 22.795547] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.839045] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.859037] loop6: detected capacity change from 0 to 219192 [ 22.911935] loop6: detected capacity change from 0 to 300096 [ 22.915618] loop6: p1 p2 p3 [ 22.923654] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.924888] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.926327] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.927673] device-mapper: ioctl: error adding target to table [ 22.930321] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.957321] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.960593] loop7: detected capacity change from 0 to 388272 [ 22.963206] loop7: p1 p2 p3 [ 22.981213] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.982495] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.984234] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 22.985886] device-mapper: ioctl: error adding target to table [ 22.988014] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.036020] erofs: (device dm-6): mounted with root inode @ nid 39. [ 23.041622] loop8: detected capacity change from 0 to 183704 [ 23.047779] loop8: p1 p2 p3 [ 23.055662] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.056898] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.058621] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 23.059973] device-mapper: ioctl: error adding target to table [ 23.062126] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.093316] erofs: (device dm-7): mounted with root inode @ nid 39. [ 23.095810] loop9: detected capacity change from 0 to 219192 [ 27.077165] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 27.102838] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/07/21 05:42:54Z: Amazon SSM Agent v3.3.0.0 is running 2026/07/21 05:42:54Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/07/21 05:42:54Z: OsVersion: 4767.0.0 [!p]104\[?7hP+q6E616D65\ This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:42:57 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:42:57 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 ip-172-31-28-94 login: [ 42.839284] kauditd_printk_skb: 13 callbacks suppressed [ 42.839288] audit: type=1305 audit(1784612587.067:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 42.841889] audit: type=1300 audit(1784612587.067:170): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcf8581d00 a2=420 a3=0 items=0 ppid=2657 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 42.846392] audit: type=1327 audit(1784612587.067:170): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 42.849454] audit: type=1130 audit(1784612587.077:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.852987] audit: type=1131 audit(1784612587.077:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.856122] audit: type=1106 audit(1784612587.080:173): pid=2651 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.859307] audit: type=1104 audit(1784612587.080:174): pid=2651 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.011608] audit: type=1106 audit(1784612587.239:175): pid=2646 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 43.019513] audit: type=1104 audit(1784612587.239:176): pid=2646 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 43.024217] audit: type=1131 audit(1784612587.242:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4101-172.31.28.94:22-20.103.240.199:40084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.097489] Initializing XFRM netlink socket This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:43:11 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:43:11 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 ip-172-31-28-94 login: [ 54.148844] kauditd_printk_skb: 128 callbacks suppressed [ 54.148848] audit: type=1130 audit(1784612598.376:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.239911] audit: type=1131 audit(1784612598.467:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.951866] audit: type=1131 audit(1784612602.178:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.967143] audit: type=1334 audit(1784612602.195:231): prog-id=38 op=UNLOAD [ 63.147531] audit: type=1130 audit(1784612607.374:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.151343] audit: type=1131 audit(1784612607.374:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.355093] zram_generator::config[3230]: No configuration found. [ 63.743552] audit: type=1334 audit(1784612607.971:234): prog-id=42 op=LOAD [ 63.744980] audit: type=1334 audit(1784612607.971:235): prog-id=34 op=UNLOAD [ 63.747049] audit: type=1334 audit(1784612607.974:236): prog-id=43 op=LOAD [ 63.748653] audit: type=1334 audit(1784612607.975:237): prog-id=35 op=UNLOAD [ 63.750294] audit: type=1334 audit(1784612607.975:238): prog-id=44 op=LOAD [ 63.751724] audit: type=1334 audit(1784612607.975:239): prog-id=45 op=LOAD [ 63.753252] audit: type=1334 audit(1784612607.975:240): prog-id=36 op=UNLOAD [ 63.754641] audit: type=1334 audit(1784612607.975:241): prog-id=37 op=UNLOAD [ 71.389523] zram_generator::config[3624]: No configuration found. [ 71.786568] kauditd_printk_skb: 202 callbacks suppressed [ 71.786572] audit: type=1334 audit(1784612616.014:336): prog-id=92 op=LOAD [ 71.789386] audit: type=1334 audit(1784612616.014:337): prog-id=42 op=UNLOAD [ 71.790916] audit: type=1334 audit(1784612616.015:338): prog-id=93 op=LOAD [ 71.792466] audit: type=1334 audit(1784612616.015:339): prog-id=71 op=UNLOAD [ 71.793972] audit: type=1334 audit(1784612616.016:340): prog-id=94 op=LOAD [ 71.795418] audit: type=1334 audit(1784612616.016:341): prog-id=82 op=UNLOAD [ 71.796841] audit: type=1334 audit(1784612616.020:342): prog-id=95 op=LOAD [ 71.798243] audit: type=1334 audit(1784612616.020:343): prog-id=43 op=UNLOAD [ 71.799672] audit: type=1334 audit(1784612616.020:344): prog-id=96 op=LOAD [ 71.801108] audit: type=1334 audit(1784612616.020:345): prog-id=97 op=LOAD [ 76.806688] kauditd_printk_skb: 49 callbacks suppressed [ 76.806692] audit: type=1106 audit(1784612621.034:395): pid=2705 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 76.812278] audit: type=1104 audit(1784612621.035:396): pid=2705 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 76.971950] audit: type=1106 audit(1784612621.199:397): pid=2685 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 76.979310] audit: type=1104 audit(1784612621.199:398): pid=2685 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 76.985944] audit: type=1131 audit(1784612621.206:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4102-172.31.28.94:22-20.103.240.199:40092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 79.393085] audit: type=1334 audit(1784612623.620:400): prog-id=118 op=LOAD [ 79.394368] audit: type=1334 audit(1784612623.621:401): prog-id=119 op=LOAD [ 79.397937] audit: type=1300 audit(1784612623.621:401): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2c0eb3ca9fd8 a2=98 a3=0 items=0 ppid=3958 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.407080] audit: type=1327 audit(1784612623.621:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232333862613366306533313533636633323366623436346363313031 [ 79.416489] audit: type=1334 audit(1784612623.621:402): prog-id=119 op=UNLOAD [ 82.806074] kauditd_printk_skb: 76 callbacks suppressed [ 82.806078] audit: type=1325 audit(1784612627.032:429): table=mangle:52 family=2 entries=1 op=nft_register_chain pid=4155 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 82.812086] audit: type=1300 audit(1784612627.032:429): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc43eabfb0 a2=0 a3=7ffc43eabf9c items=0 ppid=4095 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.819956] audit: type=1327 audit(1784612627.032:429): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 82.823712] audit: type=1325 audit(1784612627.036:430): table=nat:53 family=2 entries=1 op=nft_register_chain pid=4156 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 82.827168] audit: type=1300 audit(1784612627.036:430): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0c64f310 a2=0 a3=7ffc0c64f2fc items=0 ppid=4095 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.833638] audit: type=1327 audit(1784612627.036:430): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 82.836556] audit: type=1325 audit(1784612627.040:431): table=filter:54 family=2 entries=1 op=nft_register_chain pid=4157 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 82.839886] audit: type=1300 audit(1784612627.040:431): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffffff0fdc0 a2=0 a3=7ffffff0fdac items=0 ppid=4095 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.847124] audit: type=1327 audit(1784612627.040:431): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 82.850103] audit: type=1325 audit(1784612627.051:432): table=mangle:55 family=10 entries=1 op=nft_register_chain pid=4158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 88.141233] kauditd_printk_skb: 143 callbacks suppressed [ 88.141237] audit: type=1334 audit(1784612632.369:480): prog-id=136 op=LOAD [ 88.144517] audit: type=1334 audit(1784612632.369:481): prog-id=137 op=LOAD [ 88.145848] audit: type=1300 audit(1784612632.369:481): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=da233b1ffd8 a2=98 a3=0 items=0 ppid=3984 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.151882] audit: type=1327 audit(1784612632.369:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323066343765653762313734393733383564616362346539323438 [ 88.157503] audit: type=1334 audit(1784612632.369:482): prog-id=137 op=UNLOAD [ 88.161088] audit: type=1300 audit(1784612632.369:482): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3984 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.166553] audit: type=1327 audit(1784612632.369:482): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323066343765653762313734393733383564616362346539323438 [ 88.172584] audit: type=1334 audit(1784612632.369:483): prog-id=138 op=LOAD [ 88.174317] audit: type=1300 audit(1784612632.369:483): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=da233b20290 a2=98 a3=0 items=0 ppid=3984 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.180657] audit: type=1327 audit(1784612632.369:483): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323066343765653762313734393733383564616362346539323438 [ 93.145652] kauditd_printk_skb: 3524 callbacks suppressed [ 93.145656] audit: type=1334 audit(1784612637.373:1666): prog-id=731 op=LOAD [ 93.151233] audit: type=1300 audit(1784612637.373:1666): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe56b770e0 a2=90 a3=2 items=0 ppid=4507 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.162093] audit: type=1327 audit(1784612637.373:1666): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 93.167697] audit: type=1334 audit(1784612637.376:1667): prog-id=731 op=UNLOAD [ 93.169826] audit: type=1300 audit(1784612637.376:1667): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffe56b770e0 a2=90 a3=2 items=0 ppid=4507 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.179091] audit: type=1327 audit(1784612637.376:1667): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 93.184078] audit: type=1334 audit(1784612637.377:1668): prog-id=732 op=LOAD [ 93.185588] audit: type=1300 audit(1784612637.377:1668): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe56b770e0 a2=90 a3=2 items=0 ppid=4507 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.194075] audit: type=1327 audit(1784612637.377:1668): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 93.197089] audit: type=1334 audit(1784612637.378:1669): prog-id=732 op=UNLOAD [ 96.223926] NET: Registered PF_ALG protocol family This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:00 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:00 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 ip-172-31-28-94 login: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:01 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:01 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 ip-172-31-28-94 login: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:02 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:02 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 ip-172-31-28-94 login: [ 98.397864] eth0: renamed from tmpa45f1 [ 98.415481] eth0: renamed from tmp39839 [ 99.750070] kauditd_printk_skb: 2474 callbacks suppressed [ 99.750074] audit: type=1334 audit(1784612643.977:2494): prog-id=1123 op=LOAD [ 99.754102] audit: type=1300 audit(1784612643.977:2494): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd8b01a4e0 a2=74 a3=7ffd8b01a4e0 items=0 ppid=4507 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.762771] audit: type=1327 audit(1784612643.977:2494): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003336325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 99.768969] audit: type=1334 audit(1784612643.980:2495): prog-id=1123 op=UNLOAD [ 99.770693] audit: type=1300 audit(1784612643.980:2495): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd8b01a4e0 a2=74 a3=7ffd8b01a4e0 items=0 ppid=4507 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.776833] audit: type=1327 audit(1784612643.980:2495): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003336325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 99.778111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.778114] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 99.781644] audit: type=1334 audit(1784612643.980:2496): prog-id=1124 op=LOAD [ 99.782254] audit: backlog limit exceeded This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:04 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:04 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: ip-172-31-28-94 login: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:05 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:05 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: ip-172-31-28-94 login: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:06 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:44:06 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: ip-172-31-28-94 login: [ 105.203795] kauditd_printk_skb: 579 callbacks suppressed [ 105.203800] audit: type=1325 audit(1784612649.431:2692): table=filter:153 family=2 entries=14 op=nft_register_rule pid=5163 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.207751] audit: type=1300 audit(1784612649.431:2692): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffde20e7970 a2=0 a3=7ffde20e795c items=0 ppid=4095 pid=5163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.213581] audit: type=1327 audit(1784612649.431:2692): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 105.216479] audit: type=1325 audit(1784612649.438:2693): table=nat:154 family=2 entries=12 op=nft_register_rule pid=5163 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.219630] audit: type=1300 audit(1784612649.438:2693): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffde20e7970 a2=0 a3=0 items=0 ppid=4095 pid=5163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.225927] audit: type=1327 audit(1784612649.438:2693): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.085285] audit: type=1325 audit(1784612659.313:2694): table=filter:155 family=2 entries=11 op=nft_register_rule pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.088691] audit: type=1300 audit(1784612659.313:2694): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc7b505460 a2=0 a3=7ffc7b50544c items=0 ppid=4095 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.096919] audit: type=1327 audit(1784612659.313:2694): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.101725] audit: type=1325 audit(1784612659.329:2695): table=nat:156 family=2 entries=33 op=nft_register_chain pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.104758] audit: type=1300 audit(1784612659.329:2695): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffc7b505460 a2=0 a3=7ffc7b50544c items=0 ppid=4095 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.111145] audit: type=1327 audit(1784612659.329:2695): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.124090] audit: type=1325 audit(1784612660.351:2696): table=filter:157 family=2 entries=8 op=nft_register_rule pid=5177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.126965] audit: type=1300 audit(1784612660.351:2696): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd2cd04750 a2=0 a3=7ffd2cd0473c items=0 ppid=4095 pid=5177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.132900] audit: type=1327 audit(1784612660.351:2696): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.140511] audit: type=1325 audit(1784612660.368:2697): table=nat:158 family=2 entries=54 op=nft_register_chain pid=5177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 135.866824] kauditd_printk_skb: 2 callbacks suppressed [ 135.866828] audit: type=1130 audit(1784612680.094:2698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4103-172.31.28.94:22-20.103.240.199:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.759818] audit: type=1101 audit(1784612680.987:2699): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.766290] audit: type=1103 audit(1784612680.990:2700): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.772134] audit: type=1006 audit(1784612680.990:2701): pid=5184 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 136.775603] audit: type=1300 audit(1784612680.990:2701): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf80be6a0 a2=3 a3=0 items=0 ppid=1 pid=5184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.781689] audit: type=1327 audit(1784612680.990:2701): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 136.808946] audit: type=1105 audit(1784612681.036:2702): pid=5184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.815704] audit: type=1103 audit(1784612681.040:2703): pid=5188 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 137.868048] audit: type=1106 audit(1784612682.095:2704): pid=5184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 137.874644] audit: type=1104 audit(1784612682.098:2705): pid=5184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 143.034655] kauditd_printk_skb: 1 callbacks suppressed [ 143.034659] audit: type=1130 audit(1784612687.262:2707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4104-172.31.28.94:22-20.103.240.199:48926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.869936] audit: type=1101 audit(1784612688.097:2708): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 143.876964] audit: type=1103 audit(1784612688.099:2709): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 143.883852] audit: type=1006 audit(1784612688.099:2710): pid=5203 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 143.887133] audit: type=1300 audit(1784612688.099:2710): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda186e770 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.893263] audit: type=1327 audit(1784612688.099:2710): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 143.903598] audit: type=1105 audit(1784612688.131:2711): pid=5203 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 143.910865] audit: type=1103 audit(1784612688.138:2712): pid=5207 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.424568] audit: type=1106 audit(1784612688.652:2713): pid=5203 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.433083] audit: type=1104 audit(1784612688.652:2714): pid=5203 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 149.589635] kauditd_printk_skb: 1 callbacks suppressed [ 149.589638] audit: type=1130 audit(1784612693.817:2716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-2-172.31.28.94:22-20.103.240.199:41900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.420583] audit: type=1101 audit(1784612694.648:2717): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.426821] audit: type=1103 audit(1784612694.649:2718): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.432921] audit: type=1006 audit(1784612694.650:2719): pid=5220 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 150.436191] audit: type=1300 audit(1784612694.650:2719): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffa3e36ae0 a2=3 a3=0 items=0 ppid=1 pid=5220 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.442169] audit: type=1327 audit(1784612694.650:2719): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 150.449370] audit: type=1105 audit(1784612694.677:2720): pid=5220 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.456292] audit: type=1103 audit(1784612694.680:2721): pid=5224 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.039255] audit: type=1106 audit(1784612695.267:2722): pid=5220 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.048745] audit: type=1104 audit(1784612695.267:2723): pid=5220 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 156.203832] kauditd_printk_skb: 1 callbacks suppressed [ 156.203835] audit: type=1130 audit(1784612700.430:2725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4105-172.31.28.94:22-20.103.240.199:41904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.056296] audit: type=1101 audit(1784612701.284:2726): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.063282] audit: type=1103 audit(1784612701.286:2727): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.075512] audit: type=1006 audit(1784612701.286:2728): pid=5238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 157.084334] audit: type=1300 audit(1784612701.286:2728): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc8cff4520 a2=3 a3=0 items=0 ppid=1 pid=5238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.091564] audit: type=1327 audit(1784612701.286:2728): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 157.121216] audit: type=1105 audit(1784612701.349:2729): pid=5238 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.132008] audit: type=1103 audit(1784612701.356:2730): pid=5242 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.894693] audit: type=1106 audit(1784612702.122:2731): pid=5238 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.928752] audit: type=1104 audit(1784612702.153:2732): pid=5238 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.279088] kauditd_printk_skb: 20 callbacks suppressed [ 161.279092] audit: type=1106 audit(1784612705.506:2749): pid=5269 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.286899] audit: type=1104 audit(1784612705.506:2750): pid=5269 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.292804] audit: type=1131 audit(1784612705.510:2751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4107-172.31.28.94:22-20.103.240.199:44946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.441482] audit: type=1130 audit(1784612710.669:2752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4108-172.31.28.94:22-20.103.240.199:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.264645] audit: type=1101 audit(1784612711.492:2753): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.270768] audit: type=1103 audit(1784612711.492:2754): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.276513] audit: type=1006 audit(1784612711.492:2755): pid=5285 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 167.279750] audit: type=1300 audit(1784612711.492:2755): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdaed0e870 a2=3 a3=0 items=0 ppid=1 pid=5285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.285779] audit: type=1327 audit(1784612711.492:2755): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.291407] audit: type=1105 audit(1784612711.519:2756): pid=5285 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.298219] audit: type=1103 audit(1784612711.522:2757): pid=5289 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.798026] audit: type=1106 audit(1784612712.025:2758): pid=5285 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.807025] audit: type=1104 audit(1784612712.026:2759): pid=5285 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 171.523893] kauditd_printk_skb: 20 callbacks suppressed [ 171.523898] audit: type=1325 audit(1784612715.750:2776): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5329 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 171.528265] audit: type=1300 audit(1784612715.750:2776): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffec3bdfb40 a2=0 a3=7ffec3bdfb2c items=0 ppid=4095 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.534325] audit: type=1327 audit(1784612715.750:2776): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.537244] audit: type=1325 audit(1784612715.761:2777): table=nat:160 family=2 entries=18 op=nft_register_rule pid=5329 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 171.540488] audit: type=1300 audit(1784612715.761:2777): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffec3bdfb40 a2=0 a3=0 items=0 ppid=4095 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.546746] audit: type=1327 audit(1784612715.761:2777): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.706640] audit: type=1106 audit(1784612715.934:2778): pid=5315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 171.713808] audit: type=1104 audit(1784612715.934:2779): pid=5315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 171.723780] audit: type=1131 audit(1784612715.951:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4109-172.31.28.94:22-20.103.240.199:37620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.871221] audit: type=1130 audit(1784612716.098:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4-172.31.28.94:22-20.103.240.199:37628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.856724] kauditd_printk_skb: 27 callbacks suppressed [ 177.856729] audit: type=1325 audit(1784612722.084:2801): table=filter:163 family=2 entries=20 op=nft_register_rule pid=5369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.860924] audit: type=1300 audit(1784612722.084:2801): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdc60fac00 a2=0 a3=7ffdc60fabec items=0 ppid=4095 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.867217] audit: type=1327 audit(1784612722.084:2801): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 177.869725] audit: type=1325 audit(1784612722.091:2802): table=nat:164 family=2 entries=102 op=nft_register_chain pid=5369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.872591] audit: type=1300 audit(1784612722.091:2802): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffdc60fac00 a2=0 a3=7ffdc60fabec items=0 ppid=4095 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.878402] audit: type=1327 audit(1784612722.091:2802): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.163082] audit: type=1130 audit(1784612724.388:2803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-6-172.31.28.94:22-20.103.240.199:60008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.996598] audit: type=1101 audit(1784612725.224:2804): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.002963] audit: type=1103 audit(1784612725.226:2805): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.008774] audit: type=1006 audit(1784612725.226:2806): pid=5371 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 186.712763] kauditd_printk_skb: 7 callbacks suppressed [ 186.712767] audit: type=1130 audit(1784612730.939:2812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-7-172.31.28.94:22-20.103.240.199:46658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.539408] audit: type=1101 audit(1784612731.767:2813): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.544953] audit: type=1103 audit(1784612731.772:2814): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.551204] audit: type=1006 audit(1784612731.772:2815): pid=5388 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 187.554433] audit: type=1300 audit(1784612731.772:2815): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd92c5ca90 a2=3 a3=0 items=0 ppid=1 pid=5388 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.560546] audit: type=1327 audit(1784612731.772:2815): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.568550] audit: type=1105 audit(1784612731.796:2816): pid=5388 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.575260] audit: type=1103 audit(1784612731.799:2817): pid=5392 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.083874] audit: type=1106 audit(1784612732.311:2818): pid=5388 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.091147] audit: type=1104 audit(1784612732.311:2819): pid=5388 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:45:36 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:45:36 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: ip-172-31-28-94 login: [ 192.829892] kauditd_printk_skb: 17 callbacks suppressed [ 192.829896] audit: type=1106 audit(1784612737.057:2835): pid=5404 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 192.837512] audit: type=1104 audit(1784612737.057:2836): pid=5404 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 192.846140] audit: type=1131 audit(1784612737.061:2837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-8-172.31.28.94:22-20.103.240.199:46664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.993700] audit: type=1130 audit(1784612737.221:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4110-172.31.28.94:22-20.103.240.199:46676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.818478] audit: type=1101 audit(1784612738.046:2839): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 193.824620] audit: type=1103 audit(1784612738.048:2840): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 193.830148] audit: type=1006 audit(1784612738.048:2841): pid=5556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 193.833278] audit: type=1300 audit(1784612738.048:2841): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdc18e1e00 a2=3 a3=0 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.839593] audit: type=1327 audit(1784612738.048:2841): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 193.852875] audit: type=1105 audit(1784612738.080:2842): pid=5556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.394790] kauditd_printk_skb: 109 callbacks suppressed [ 198.394795] audit: type=1334 audit(1784612742.622:2896): prog-id=1263 op=LOAD [ 198.398207] audit: type=1334 audit(1784612742.625:2897): prog-id=1264 op=LOAD [ 198.399628] audit: type=1300 audit(1784612742.625:2897): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=137b26079fd8 a2=98 a3=0 items=0 ppid=5587 pid=5779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.405334] audit: type=1327 audit(1784612742.625:2897): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393666633334353865613863333566336538383532656430633134 [ 198.411964] audit: type=1334 audit(1784612742.625:2898): prog-id=1264 op=UNLOAD [ 198.415305] audit: type=1300 audit(1784612742.625:2898): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5587 pid=5779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.421697] audit: type=1327 audit(1784612742.625:2898): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393666633334353865613863333566336538383532656430633134 [ 198.427800] audit: type=1334 audit(1784612742.625:2899): prog-id=1265 op=LOAD [ 198.429544] audit: type=1300 audit(1784612742.625:2899): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=137b2607a290 a2=98 a3=0 items=0 ppid=5587 pid=5779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.436207] audit: type=1327 audit(1784612742.625:2899): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233393666633334353865613863333566336538383532656430633134 [ 200.175650] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 203.396961] kauditd_printk_skb: 6134 callbacks suppressed [ 203.396965] audit: type=1334 audit(1784612747.624:4945): prog-id=1228 op=UNLOAD [ 203.401415] audit: type=1300 audit(1784612747.624:4945): arch=c000003e syscall=321 success=yes exit=0 a0=3 a1=c000d63660 a2=20 a3=8 items=0 ppid=5587 pid=5831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.408439] audit: type=1327 audit(1784612747.624:4945): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 203.429887] audit: type=1334 audit(1784612747.657:4946): prog-id=1216 op=UNLOAD [ 203.432042] audit: type=1334 audit(1784612747.657:4947): prog-id=1220 op=UNLOAD [ 203.434286] audit: type=1334 audit(1784612747.657:4948): prog-id=1219 op=UNLOAD [ 203.436480] audit: type=1334 audit(1784612747.661:4949): prog-id=1221 op=UNLOAD [ 203.437870] audit: type=1334 audit(1784612747.663:4950): prog-id=1217 op=UNLOAD [ 203.440617] audit: type=1334 audit(1784612747.663:4951): prog-id=1222 op=UNLOAD [ 203.442028] audit: type=1334 audit(1784612747.663:4952): prog-id=1218 op=UNLOAD This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:45:50 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: This is ip-172-31-28-94 (Linux x86_64 6.12.96-flatcar) 05:45:50 SSH host key: SHA256:zMDB0ggKCdxQZv4FG+VK16Su9+qDQbOPLMVFSIf2AeY (ED25519) SSH host key: SHA256:jO1k2Hsf7zNsN+e2JAcFl1yXO5QLlzBMSv4667vFu8Q (RSA) SSH host key: SHA256:s4AihiPZm5SVKovzqZPdF/Ni+ccK9WZJTeHjMPYkCnU (ECDSA) eth0: 172.31.28.94 fe80::40c:46ff:fe3c:fe45 tmpa45f1: ip-172-31-28-94 login: [ 208.411090] kauditd_printk_skb: 138 callbacks suppressed [ 208.411094] audit: type=1334 audit(1784612752.638:5001): prog-id=2256 op=LOAD [ 208.414088] audit: type=1300 audit(1784612752.638:5001): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff48a07bb0 a2=74 a3=7fff48a07bb0 items=0 ppid=5831 pid=6454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.420780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.421893] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 208.423100] audit: backlog limit exceeded [ 208.423946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.424173] audit: type=1327 audit(1784612752.638:5001): proctitle=74630066696C746572007265706C61636500646576006C786331376637383261333136306300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313633375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 208.424279] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 208.425257] audit: type=1334 audit(1784612752.639:5002): prog-id=2256 op=UNLOAD [ 208.425324] audit: backlog limit exceeded [ 223.341148] kauditd_printk_skb: 423 callbacks suppressed [ 223.341152] audit: type=1334 audit(1784612767.569:5148): prog-id=86 op=UNLOAD [ 223.343692] audit: type=1334 audit(1784612767.569:5149): prog-id=94 op=UNLOAD [ 224.541132] audit: type=1334 audit(1784612768.769:5150): prog-id=2334 op=LOAD [ 224.542620] audit: type=1334 audit(1784612768.770:5151): prog-id=2335 op=LOAD [ 224.544291] audit: type=1300 audit(1784612768.770:5151): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=23f6b858dfd8 a2=98 a3=0 items=0 ppid=3371 pid=6500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.549562] audit: type=1327 audit(1784612768.770:5151): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343434623866633865333562623064323830353462383737653638 [ 224.555404] audit: type=1334 audit(1784612768.770:5152): prog-id=2335 op=UNLOAD [ 224.556965] audit: type=1300 audit(1784612768.770:5152): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3371 pid=6500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.562837] audit: type=1327 audit(1784612768.770:5152): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343434623866633865333562623064323830353462383737653638 [ 224.568694] audit: type=1334 audit(1784612768.770:5153): prog-id=2336 op=LOAD [ 228.550626] kauditd_printk_skb: 16 callbacks suppressed [ 228.550630] audit: type=1334 audit(1784612772.778:5160): prog-id=2339 op=LOAD [ 228.553764] audit: type=1334 audit(1784612772.781:5161): prog-id=2340 op=LOAD [ 228.555800] audit: type=1300 audit(1784612772.781:5161): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=207390031fd8 a2=98 a3=0 items=0 ppid=3353 pid=6544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.561148] audit: type=1327 audit(1784612772.781:5161): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656366346663326361346639383862353539343838323364653138 [ 228.566286] audit: type=1334 audit(1784612772.783:5162): prog-id=2340 op=UNLOAD [ 228.567755] audit: type=1300 audit(1784612772.783:5162): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3353 pid=6544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.573418] audit: type=1327 audit(1784612772.783:5162): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656366346663326361346639383862353539343838323364653138 [ 228.579321] audit: type=1334 audit(1784612772.783:5163): prog-id=2341 op=LOAD [ 228.580786] audit: type=1300 audit(1784612772.783:5163): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=207390032290 a2=98 a3=0 items=0 ppid=3353 pid=6544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.586612] audit: type=1327 audit(1784612772.783:5163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656366346663326361346639383862353539343838323364653138