u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.468913] audit: type=1131 audit(1788851194.379:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.544836] erofs: (device dm-5): mounted with root inode @ nid 40. [ 21.589458] loop6: detected capacity change from 0 to 44488 [ 21.599358] loop6: p1 p2 p3 [ 21.606853] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.608260] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.608268] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.608271] device-mapper: ioctl: error adding target to table [ 21.610351] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.652967] erofs: (device dm-5): mounted with root inode @ nid 40. [ 21.663917] audit: type=1130 audit(1788851194.582:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.684243] loop6: detected capacity change from 0 to 169040 [ 21.697853] loop6: p1 p2 p3 [ 21.709160] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.710294] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.711898] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.713388] device-mapper: ioctl: error adding target to table [ 21.718238] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.756813] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.759295] audit: type=1130 audit(1788851194.676:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.772791] audit: type=1130 audit(1788851194.690:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.783406] loop6: detected capacity change from 0 to 219840 [ 21.826244] loop6: detected capacity change from 0 to 324328 [ 21.836183] loop6: p1 p2 p3 [ 21.841345] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.842462] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.843971] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.845368] device-mapper: ioctl: error adding target to table [ 21.847635] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.883941] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.904096] loop6: detected capacity change from 0 to 415352 [ 21.914386] loop6: p1 p2 p3 [ 21.919634] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.920772] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.922174] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.924232] device-mapper: ioctl: error adding target to table [ 21.926477] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.969861] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.994452] loop6: detected capacity change from 0 to 169040 [ 22.005898] loop6: p1 p2 p3 [ 22.011643] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.012850] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.014417] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.015862] device-mapper: ioctl: error adding target to table [ 22.018215] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.040569] audit: type=1130 audit(1788851194.957:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.044692] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.048750] loop7: detected capacity change from 0 to 219840 [ 22.071502] loop8: detected capacity change from 0 to 324328 [ 22.081043] loop8: p1 p2 p3 [ 22.086360] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.087444] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.088883] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 22.090237] device-mapper: ioctl: error adding target to table [ 22.092377] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.130355] erofs: (device dm-6): mounted with root inode @ nid 39. [ 22.133465] loop9: detected capacity change from 0 to 415352 [ 22.142502] loop9: p1 p2 p3 [ 22.149132] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.150237] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.151672] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 22.153210] device-mapper: ioctl: error adding target to table [ 22.155835] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.197252] erofs: (device dm-7): mounted with root inode @ nid 39. [ 25.824825] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 25.875866] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/09/08 07:06:41Z: Amazon SSM Agent v3.3.0.0 is running 2026/09/08 07:06:41Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/09/08 07:06:41Z: OsVersion: 4816.0.0 [!p]104\[?7hP+q6E616D65\ This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:06:45 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 41.118866] kauditd_printk_skb: 8 callbacks suppressed [ 41.118871] audit: type=1305 audit(1788851214.027:158): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 41.121803] audit: type=1300 audit(1788851214.027:158): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff57b3f9d0 a2=420 a3=0 items=0 ppid=2024 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 41.127816] audit: type=1327 audit(1788851214.027:158): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 41.129526] audit: type=1130 audit(1788851214.036:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.132458] audit: type=1131 audit(1788851214.036:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.135397] audit: type=1106 audit(1788851214.040:161): pid=2018 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.138625] audit: type=1104 audit(1788851214.041:162): pid=2018 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.284863] audit: type=1106 audit(1788851214.198:163): pid=2013 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 41.291992] audit: type=1104 audit(1788851214.198:164): pid=2013 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 41.295996] audit: type=1131 audit(1788851214.204:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.16.127:22-20.61.25.254:59714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.154941] kauditd_printk_skb: 13 callbacks suppressed [ 48.154946] audit: type=1325 audit(1788851221.066:177): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.158719] audit: type=1300 audit(1788851221.066:177): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcd2774180 a2=0 a3=0 items=0 ppid=2093 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.165103] audit: type=1327 audit(1788851221.066:177): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 48.167639] audit: type=1325 audit(1788851221.071:178): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.170955] audit: type=1300 audit(1788851221.071:178): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffeaeff54e0 a2=0 a3=0 items=0 ppid=2093 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.177212] audit: type=1327 audit(1788851221.071:178): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 48.179846] audit: type=1325 audit(1788851221.074:179): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.182991] audit: type=1300 audit(1788851221.074:179): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc98f656a0 a2=0 a3=0 items=0 ppid=2093 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.188547] audit: type=1327 audit(1788851221.074:179): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 48.191287] audit: type=1325 audit(1788851221.076:180): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.373243] Initializing XFRM netlink socket This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:02 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:03 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 53.989032] kauditd_printk_skb: 90 callbacks suppressed [ 53.989036] audit: type=1130 audit(1788851226.897:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.071252] audit: type=1131 audit(1788851226.979:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.235715] audit: type=1131 audit(1788851230.141:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.248967] audit: type=1334 audit(1788851230.155:214): prog-id=32 op=UNLOAD [ 64.582740] audit: type=1130 audit(1788851237.486:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.654441] audit: type=1131 audit(1788851237.557:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 65.681207] audit: type=1130 audit(1788851238.582:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.685230] audit: type=1131 audit(1788851238.582:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.874174] zram_generator::config[2619]: No configuration found. [ 66.266015] audit: type=1334 audit(1788851239.168:219): prog-id=36 op=LOAD [ 66.267618] audit: type=1334 audit(1788851239.168:220): prog-id=20 op=UNLOAD [ 66.269273] audit: type=1334 audit(1788851239.168:221): prog-id=37 op=LOAD [ 66.270823] audit: type=1334 audit(1788851239.168:222): prog-id=38 op=LOAD [ 66.272296] audit: type=1334 audit(1788851239.168:223): prog-id=21 op=UNLOAD [ 66.273779] audit: type=1334 audit(1788851239.168:224): prog-id=22 op=UNLOAD [ 73.173862] zram_generator::config[3284]: No configuration found. [ 73.574053] kauditd_printk_skb: 204 callbacks suppressed [ 73.574058] audit: type=1334 audit(1788851246.473:321): prog-id=86 op=LOAD [ 73.577261] audit: type=1334 audit(1788851246.473:322): prog-id=76 op=UNLOAD [ 73.578843] audit: type=1334 audit(1788851246.474:323): prog-id=87 op=LOAD [ 73.580538] audit: type=1334 audit(1788851246.474:324): prog-id=36 op=UNLOAD [ 73.582161] audit: type=1334 audit(1788851246.474:325): prog-id=88 op=LOAD [ 73.583600] audit: type=1334 audit(1788851246.475:326): prog-id=89 op=LOAD [ 73.585222] audit: type=1334 audit(1788851246.475:327): prog-id=37 op=UNLOAD [ 73.586639] audit: type=1334 audit(1788851246.475:328): prog-id=38 op=UNLOAD [ 73.588218] audit: type=1334 audit(1788851246.475:329): prog-id=90 op=LOAD [ 73.589642] audit: type=1334 audit(1788851246.475:330): prog-id=39 op=UNLOAD [ 80.984860] kauditd_printk_skb: 54 callbacks suppressed [ 80.984864] audit: type=1334 audit(1788851253.880:385): prog-id=112 op=LOAD [ 80.988193] audit: type=1334 audit(1788851253.880:386): prog-id=113 op=LOAD [ 80.990730] audit: type=1300 audit(1788851253.880:386): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=15a4359b1fd8 a2=98 a3=0 items=0 ppid=3431 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.997849] audit: type=1327 audit(1788851253.880:386): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666313164343262383836656237663730323165333332633530306237 [ 81.003812] audit: type=1334 audit(1788851253.880:387): prog-id=113 op=UNLOAD [ 81.005844] audit: type=1300 audit(1788851253.880:387): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3431 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.011641] audit: type=1327 audit(1788851253.880:387): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666313164343262383836656237663730323165333332633530306237 [ 81.018073] audit: type=1334 audit(1788851253.880:388): prog-id=114 op=LOAD [ 81.019581] audit: type=1300 audit(1788851253.880:388): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=15a4359b2290 a2=98 a3=0 items=0 ppid=3431 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.025556] audit: type=1327 audit(1788851253.880:388): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666313164343262383836656237663730323165333332633530306237 [ 88.695712] kauditd_printk_skb: 224 callbacks suppressed [ 88.695716] audit: type=1334 audit(1788851261.587:465): prog-id=130 op=LOAD [ 88.698124] audit: type=1334 audit(1788851261.589:466): prog-id=131 op=LOAD [ 88.699622] audit: type=1300 audit(1788851261.589:466): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=21ef421b1fd8 a2=98 a3=0 items=0 ppid=3431 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.707127] audit: type=1327 audit(1788851261.589:466): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139643132333962623737616133346263653631663564353131646537 [ 88.715798] audit: type=1334 audit(1788851261.589:467): prog-id=131 op=UNLOAD [ 88.717435] audit: type=1300 audit(1788851261.589:467): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3431 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.722990] audit: type=1327 audit(1788851261.589:467): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139643132333962623737616133346263653631663564353131646537 [ 88.729015] audit: type=1334 audit(1788851261.589:468): prog-id=132 op=LOAD [ 88.730644] audit: type=1300 audit(1788851261.589:468): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=21ef421b2290 a2=98 a3=0 items=0 ppid=3431 pid=3745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.736282] audit: type=1327 audit(1788851261.589:468): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139643132333962623737616133346263653631663564353131646537 [ 93.821157] kauditd_printk_skb: 3902 callbacks suppressed [ 93.821161] audit: type=1334 audit(1788851266.709:1777): prog-id=788 op=LOAD [ 93.823686] audit: type=1300 audit(1788851266.709:1777): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeefcf5530 a2=74 a3=7ffeefcf5530 items=0 ppid=3972 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.829260] audit: type=1327 audit(1788851266.709:1777): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 93.831823] audit: type=1334 audit(1788851266.710:1778): prog-id=788 op=UNLOAD [ 93.833436] audit: type=1300 audit(1788851266.710:1778): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffeefcf5530 a2=74 a3=7ffeefcf5530 items=0 ppid=3972 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.839297] audit: type=1327 audit(1788851266.710:1778): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 93.841306] audit: type=1334 audit(1788851266.710:1779): prog-id=789 op=LOAD [ 93.842577] audit: type=1300 audit(1788851266.710:1779): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeefcf45b0 a2=90 a3=2 items=0 ppid=3972 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 93.847928] audit: type=1327 audit(1788851266.710:1779): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 93.849951] audit: type=1334 audit(1788851266.710:1780): prog-id=789 op=UNLOAD This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:49 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 96.678402] NET: Registered PF_ALG protocol family This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:50 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 98.263142] eth0: renamed from tmp947e4 [ 98.275022] eth0: renamed from tmp01094 This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:51 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:52 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:07:53 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 102.411495] kauditd_printk_skb: 2213 callbacks suppressed [ 102.411499] audit: type=1334 audit(1788851275.295:2518): prog-id=1141 op=LOAD [ 102.414759] audit: type=1300 audit(1788851275.295:2518): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc83625890 a2=74 a3=7ffc83625890 items=0 ppid=3972 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.424433] audit: type=1327 audit(1788851275.295:2518): proctitle=74630066696C746572007265706C61636500646576006C786337356533363663383266653000696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 102.431596] audit: type=1334 audit(1788851275.296:2519): prog-id=1141 op=UNLOAD [ 102.433225] audit: type=1300 audit(1788851275.296:2519): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc83625890 a2=74 a3=7ffc83625890 items=0 ppid=3972 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.439152] audit: type=1327 audit(1788851275.296:2519): proctitle=74630066696C746572007265706C61636500646576006C786337356533363663383266653000696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 102.443477] audit: type=1334 audit(1788851275.296:2520): prog-id=1142 op=LOAD [ 102.444794] audit: type=1300 audit(1788851275.296:2520): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc83625820 a2=80 a3=0 items=0 ppid=3972 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.449940] audit: type=1327 audit(1788851275.296:2520): proctitle=74630066696C746572007265706C61636500646576006C786337356533363663383266653000696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 102.454770] audit: type=1334 audit(1788851275.296:2521): prog-id=1142 op=UNLOAD [ 113.523299] kauditd_printk_skb: 468 callbacks suppressed [ 113.523303] audit: type=1325 audit(1788851286.401:2680): table=filter:150 family=2 entries=11 op=nft_register_rule pid=4644 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.527689] audit: type=1300 audit(1788851286.401:2680): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd123960e0 a2=0 a3=7ffd123960cc items=0 ppid=3563 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.533403] audit: type=1327 audit(1788851286.401:2680): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.536237] audit: type=1325 audit(1788851286.412:2681): table=nat:151 family=2 entries=33 op=nft_register_chain pid=4644 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.539104] audit: type=1300 audit(1788851286.412:2681): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffd123960e0 a2=0 a3=7ffd123960cc items=0 ppid=3563 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.545192] audit: type=1327 audit(1788851286.412:2681): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.553055] audit: type=1325 audit(1788851287.431:2682): table=filter:152 family=2 entries=8 op=nft_register_rule pid=4646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.556178] audit: type=1300 audit(1788851287.431:2682): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd7990e750 a2=0 a3=7ffd7990e73c items=0 ppid=3563 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.562122] audit: type=1327 audit(1788851287.431:2682): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.569763] audit: type=1325 audit(1788851287.447:2683): table=nat:153 family=2 entries=54 op=nft_register_chain pid=4646 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 135.182750] kauditd_printk_skb: 2 callbacks suppressed [ 135.182755] audit: type=1130 audit(1788851308.049:2684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.16.127:22-20.61.25.254:52402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.094498] audit: type=1101 audit(1788851308.962:2685): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 136.100266] audit: type=1103 audit(1788851308.966:2686): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 136.106325] audit: type=1006 audit(1788851308.966:2687): pid=4654 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 136.109497] audit: type=1300 audit(1788851308.966:2687): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffc0f25d30 a2=3 a3=0 items=0 ppid=1 pid=4654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.115508] audit: type=1327 audit(1788851308.966:2687): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 136.126127] audit: type=1105 audit(1788851308.993:2688): pid=4654 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 136.133843] audit: type=1103 audit(1788851308.996:2689): pid=4661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 137.266451] audit: type=1106 audit(1788851310.132:2690): pid=4654 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 137.275316] audit: type=1104 audit(1788851310.132:2691): pid=4654 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 142.430198] kauditd_printk_skb: 1 callbacks suppressed [ 142.430201] audit: type=1130 audit(1788851315.294:2693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-3-172.31.16.127:22-20.61.25.254:52418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.271793] audit: type=1101 audit(1788851316.134:2694): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 143.277954] audit: type=1103 audit(1788851316.136:2695): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 143.283709] audit: type=1006 audit(1788851316.136:2696): pid=4676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 143.286982] audit: type=1300 audit(1788851316.136:2696): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffc4aa8230 a2=3 a3=0 items=0 ppid=1 pid=4676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.293060] audit: type=1327 audit(1788851316.136:2696): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 143.299302] audit: type=1105 audit(1788851316.162:2697): pid=4676 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 143.305924] audit: type=1103 audit(1788851316.165:2698): pid=4680 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 143.822877] audit: type=1106 audit(1788851316.686:2699): pid=4676 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 143.829764] audit: type=1104 audit(1788851316.686:2700): pid=4676 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 148.989098] kauditd_printk_skb: 1 callbacks suppressed [ 148.989103] audit: type=1130 audit(1788851321.850:2702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4-172.31.16.127:22-20.61.25.254:47966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.832110] audit: type=1101 audit(1788851322.692:2703): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 149.838332] audit: type=1103 audit(1788851322.694:2704): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 149.844208] audit: type=1006 audit(1788851322.694:2705): pid=4693 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 149.847480] audit: type=1300 audit(1788851322.694:2705): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff534daf80 a2=3 a3=0 items=0 ppid=1 pid=4693 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.853437] audit: type=1327 audit(1788851322.694:2705): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 149.859474] audit: type=1105 audit(1788851322.720:2706): pid=4693 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 149.866217] audit: type=1103 audit(1788851322.723:2707): pid=4697 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 150.382455] audit: type=1106 audit(1788851323.241:2708): pid=4693 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 150.389571] audit: type=1104 audit(1788851323.241:2709): pid=4693 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 155.546749] kauditd_printk_skb: 1 callbacks suppressed [ 155.546753] audit: type=1130 audit(1788851328.404:2711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-5-172.31.16.127:22-20.61.25.254:53352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.375751] audit: type=1101 audit(1788851329.233:2712): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 156.382115] audit: type=1103 audit(1788851329.235:2713): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 156.388392] audit: type=1006 audit(1788851329.235:2714): pid=4712 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 156.391751] audit: type=1300 audit(1788851329.235:2714): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff30cc63c0 a2=3 a3=0 items=0 ppid=1 pid=4712 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.397110] audit: type=1327 audit(1788851329.235:2714): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 156.409683] audit: type=1105 audit(1788851329.267:2715): pid=4712 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 156.416566] audit: type=1103 audit(1788851329.269:2716): pid=4716 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 156.915423] audit: type=1106 audit(1788851329.772:2717): pid=4712 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 156.922383] audit: type=1104 audit(1788851329.772:2718): pid=4712 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 165.194935] kauditd_printk_skb: 23 callbacks suppressed [ 165.194940] audit: type=1130 audit(1788851338.047:2738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.16.127:22-20.61.25.254:38770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.020460] audit: type=1101 audit(1788851338.873:2739): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.029798] audit: type=1103 audit(1788851338.874:2740): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.037004] audit: type=1006 audit(1788851338.874:2741): pid=4761 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 166.040834] audit: type=1300 audit(1788851338.874:2741): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1a661230 a2=3 a3=0 items=0 ppid=1 pid=4761 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.047092] audit: type=1327 audit(1788851338.874:2741): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 166.049614] audit: type=1105 audit(1788851338.901:2742): pid=4761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.056132] audit: type=1103 audit(1788851338.905:2743): pid=4765 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.556047] audit: type=1106 audit(1788851339.408:2744): pid=4761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.563055] audit: type=1104 audit(1788851339.408:2745): pid=4761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 170.873945] kauditd_printk_skb: 20 callbacks suppressed [ 170.873949] audit: type=1325 audit(1788851343.724:2762): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 170.879369] audit: type=1300 audit(1788851343.724:2762): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffeaa06fca0 a2=0 a3=7ffeaa06fc8c items=0 ppid=3563 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.886250] audit: type=1327 audit(1788851343.724:2762): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 170.890585] audit: type=1325 audit(1788851343.740:2763): table=nat:155 family=2 entries=18 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 170.893557] audit: type=1300 audit(1788851343.740:2763): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffeaa06fca0 a2=0 a3=0 items=0 ppid=3563 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.903312] audit: type=1327 audit(1788851343.740:2763): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.063683] audit: type=1106 audit(1788851343.913:2764): pid=4791 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.070446] audit: type=1104 audit(1788851343.913:2765): pid=4791 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.077677] audit: type=1131 audit(1788851343.926:2766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-172.31.16.127:22-20.61.25.254:38788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.231546] audit: type=1130 audit(1788851344.081:2767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.16.127:22-20.61.25.254:38792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.689333] kauditd_printk_skb: 27 callbacks suppressed [ 176.689337] audit: type=1325 audit(1788851349.539:2787): table=filter:158 family=2 entries=20 op=nft_register_rule pid=4843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.693446] audit: type=1300 audit(1788851349.539:2787): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff3ee416b0 a2=0 a3=7fff3ee4169c items=0 ppid=3563 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.699811] audit: type=1327 audit(1788851349.539:2787): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 176.702440] audit: type=1325 audit(1788851349.546:2788): table=nat:159 family=2 entries=102 op=nft_register_chain pid=4843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.705297] audit: type=1300 audit(1788851349.546:2788): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7fff3ee416b0 a2=0 a3=7fff3ee4169c items=0 ppid=3563 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.711532] audit: type=1327 audit(1788851349.546:2788): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 179.523459] audit: type=1130 audit(1788851352.372:2789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-8-172.31.16.127:22-20.61.25.254:45436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.348802] audit: type=1101 audit(1788851353.199:2790): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 180.355023] audit: type=1103 audit(1788851353.202:2791): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 180.360071] audit: type=1006 audit(1788851353.202:2792): pid=4845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 186.051982] kauditd_printk_skb: 7 callbacks suppressed [ 186.051986] audit: type=1130 audit(1788851358.902:2798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-9-172.31.16.127:22-20.61.25.254:44898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.879388] audit: type=1101 audit(1788851359.729:2799): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 186.885711] audit: type=1103 audit(1788851359.729:2800): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 186.891523] audit: type=1006 audit(1788851359.729:2801): pid=4861 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 186.895194] audit: type=1300 audit(1788851359.729:2801): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcf38d5b70 a2=3 a3=0 items=0 ppid=1 pid=4861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.900859] audit: type=1327 audit(1788851359.729:2801): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 186.906909] audit: type=1105 audit(1788851359.757:2802): pid=4861 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 186.913857] audit: type=1103 audit(1788851359.760:2803): pid=4865 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 187.430163] audit: type=1106 audit(1788851360.280:2804): pid=4861 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 187.437985] audit: type=1104 audit(1788851360.280:2805): pid=4861 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:09:24 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 192.274334] kauditd_printk_skb: 17 callbacks suppressed [ 192.274338] audit: type=1106 audit(1788851365.124:2821): pid=4877 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 192.281281] audit: type=1104 audit(1788851365.127:2822): pid=4877 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 192.286372] audit: type=1131 audit(1788851365.132:2823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4108-172.31.16.127:22-20.61.25.254:44900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:09:25 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 192.436002] audit: type=1130 audit(1788851365.286:2824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10-172.31.16.127:22-20.61.25.254:44916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.300480] audit: type=1101 audit(1788851366.150:2825): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.306588] audit: type=1103 audit(1788851366.153:2826): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.312085] audit: type=1006 audit(1788851366.153:2827): pid=5029 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 193.315411] audit: type=1300 audit(1788851366.153:2827): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1b6b2530 a2=3 a3=0 items=0 ppid=1 pid=5029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.321300] audit: type=1327 audit(1788851366.153:2827): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 193.327582] audit: type=1105 audit(1788851366.178:2828): pid=5029 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 197.822924] kauditd_printk_skb: 109 callbacks suppressed [ 197.822927] audit: type=1334 audit(1788851370.673:2882): prog-id=1257 op=LOAD [ 197.825713] audit: type=1334 audit(1788851370.675:2883): prog-id=1258 op=LOAD [ 197.827083] audit: type=1300 audit(1788851370.675:2883): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=12e6ff1ffd8 a2=98 a3=0 items=0 ppid=5059 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.833731] audit: type=1327 audit(1788851370.675:2883): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538373564663862633737633862383534633765613931633138326632 [ 197.839225] audit: type=1334 audit(1788851370.675:2884): prog-id=1258 op=UNLOAD [ 197.840709] audit: type=1300 audit(1788851370.675:2884): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5059 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.846416] audit: type=1327 audit(1788851370.675:2884): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538373564663862633737633862383534633765613931633138326632 [ 197.853055] audit: type=1334 audit(1788851370.675:2885): prog-id=1259 op=LOAD [ 197.854841] audit: type=1300 audit(1788851370.675:2885): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=12e6ff20290 a2=98 a3=0 items=0 ppid=5059 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.861901] audit: type=1327 audit(1788851370.675:2885): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538373564663862633737633862383534633765613931633138326632 [ 199.938412] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 202.826981] kauditd_printk_skb: 6044 callbacks suppressed [ 202.826985] audit: type=1325 audit(1788851375.677:4904): table=raw:238 family=2 entries=1 op=nft_unregister_rule pid=5789 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 202.830754] audit: type=1300 audit(1788851375.677:4904): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffd67faf1f0 a2=0 a3=7ffd67faf1dc items=0 ppid=5294 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 202.836278] audit: type=1327 audit(1788851375.677:4904): proctitle=69707461626C6573002D770035002D7400726177002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F726177002D6A004F4C445F43494C49554D5F5052455F726177 [ 202.842478] audit: type=1325 audit(1788851375.692:4905): table=raw:239 family=2 entries=1 op=nft_unregister_rule pid=5790 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 202.845385] audit: type=1300 audit(1788851375.692:4905): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffd765cf3a0 a2=0 a3=7ffd765cf38c items=0 ppid=5294 pid=5790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 202.851408] audit: type=1327 audit(1788851375.692:4905): proctitle=69707461626C6573002D770035002D7400726177002D44004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F726177002D6A004F4C445F43494C49554D5F4F55545055545F726177 [ 202.856302] audit: type=1325 audit(1788851375.704:4906): table=raw:240 family=2 entries=1 op=nft_unregister_rule pid=5791 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 202.859010] audit: type=1300 audit(1788851375.704:4906): arch=c000003e syscall=46 success=yes exit=716 a0=3 a1=7ffc802c2750 a2=0 a3=7ffc802c273c items=0 ppid=5294 pid=5791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 202.864683] audit: type=1327 audit(1788851375.704:4906): proctitle=69707461626C6573002D770035002D7400726177002D44004F4C445F43494C49554D5F4F55545055545F726177002D6F006C78632B002D6D006D61726B002D2D6D61726B0030786130302F30786666666666656666002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A204E4F545241434B20666F722070 [ 202.871630] audit: type=1325 audit(1788851375.722:4907): table=raw:241 family=2 entries=1 op=nft_unregister_rule pid=5792 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:09:37 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:09:38 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: This is ip-172-31-16-127 (Linux x86_64 6.12.108-flatcar) 07:09:39 SSH host key: SHA256:PwkqeQLRn78wsJN8RTmHQhihamspGDMqhGnH1pNpDzg (MLDSA44-ED25519) SSH host key: SHA256:ZiHjJuReJWhbRGfm3CX54zbabPmBAHiRyYgaThW8OP8 (ED25519) SSH host key: SHA256:hcQLX0NC4BKIvqDQK86brMQEgWotwx6cXo+kt3zZoIQ (RSA) SSH host key: SHA256:Vr28U40qPNQA/BMg+ksXLRH6fu/zyF1XwO+UQ5Hdczs (ECDSA) eth0: 172.31.16.127 fe80::419:fcff:fe4f:c97%eth0 ip-172-31-16-127 login: [ 208.287301] kauditd_printk_skb: 228 callbacks suppressed [ 208.287305] audit: type=1334 audit(1788851381.137:4990): prog-id=2250 op=LOAD [ 208.293444] audit: type=1334 audit(1788851381.143:4991): prog-id=2251 op=LOAD [ 208.295035] audit: type=1300 audit(1788851381.143:4991): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff968a3270 a2=74 a3=7fff968a3270 items=0 ppid=5294 pid=5945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.305379] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.306580] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 208.307827] audit: backlog limit exceeded [ 208.309211] audit: type=1300 audit(1788851381.137:4990): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffefd339340 a2=74 a3=7ffefd339340 items=0 ppid=5294 pid=5944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.316064] audit: type=1327 audit(1788851381.137:4990): proctitle=74630066696C746572007265706C61636500646576006C786337356533363663383266653000696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 208.320997] audit: type=1334 audit(1788851381.145:4992): prog-id=2250 op=UNLOAD [ 208.323571] audit: type=1300 audit(1788851381.145:4992): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffefd339340 a2=74 a3=7ffefd339340 items=0 ppid=5294 pid=5944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null)