etc/nsswitch.conf [ 23.037862] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 23.039463] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 23.041774] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 [ 23.051153] systemd[1]: Starting systemd-journald.service - Journal Service... [ 23.059139] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 23.072746] systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... [ 23.078346] systemd[1]: Reached target time-set.target - System Time Set. [ 23.085797] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 23.097251] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 23.106873] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 23.110827] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen [ 23.125614] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 23.129119] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 23.129132] systemd-journald[1302]: Collecting audit messages is enabled. [ 23.133141] systemd[1]: Mounted media.mount - External Media Directory. [ 23.136167] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 23.138287] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 23.141882] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 23.145485] systemd[1]: Started systemd-journald.service - Journal Service. [ 23.222847] fuse: init (API version 7.41) [ 23.358657] systemd-journald[1302]: Received client request to flush runtime journal. [ 23.658103] tun: Universal TUN/TAP device driver, 1.6 [ 23.811088] loop6: detected capacity change from 0 to 44465 [ 23.818861] loop6: p1 p2 p3 [ 23.877486] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.879952] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.888850] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.893949] device-mapper: ioctl: error adding target to table [ 23.907006] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.929493] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input4 [ 24.933010] mousedev: PS/2 mouse device common for all mice [ 24.934313] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 24.947989] ACPI: button: Power Button [PWRF] [ 24.950477] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input5 [ 24.956153] ACPI: button: Sleep Button [SLPF] [ 25.415501] erofs: (device dm-5): mounted with root inode @ nid 40. [ 25.450806] loop6: detected capacity change from 0 to 44465 [ 25.458884] loop6: p1 p2 p3 [ 25.472277] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.473970] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.475563] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.477147] device-mapper: ioctl: error adding target to table [ 25.479751] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.521477] erofs: (device dm-5): mounted with root inode @ nid 40. [ 25.551247] loop6: detected capacity change from 0 to 431960 [ 25.558005] loop6: p1 p2 p3 [ 25.567293] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.568510] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.570012] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.571541] device-mapper: ioctl: error adding target to table [ 25.576862] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.620830] erofs: (device dm-5): mounted with root inode @ nid 39. [ 25.644387] loop6: detected capacity change from 0 to 324488 [ 25.655843] loop6: p1 p2 p3 [ 25.664641] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.665780] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.667400] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.669247] device-mapper: ioctl: error adding target to table [ 25.673639] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.715029] erofs: (device dm-5): mounted with root inode @ nid 39. [ 25.741252] loop6: detected capacity change from 0 to 219840 [ 25.790220] loop6: detected capacity change from 0 to 169096 [ 25.800297] loop6: p1 p2 p3 [ 25.806372] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.807607] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.809196] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.810701] device-mapper: ioctl: error adding target to table [ 25.813011] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.852591] erofs: (device dm-5): mounted with root inode @ nid 39. [ 25.873424] loop6: detected capacity change from 0 to 431960 [ 25.879675] loop6: p1 p2 p3 [ 25.885097] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.886206] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.887832] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.889293] device-mapper: ioctl: error adding target to table [ 25.893078] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.939194] erofs: (device dm-5): mounted with root inode @ nid 39. [ 25.944714] loop7: detected capacity change from 0 to 324488 [ 25.952917] loop7: p1 p2 p3 [ 25.958347] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.959414] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.960838] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 25.962279] device-mapper: ioctl: error adding target to table [ 25.965588] device-mapper: verity: sha256 using shash "sha256-avx2" [ 26.004006] erofs: (device dm-6): mounted with root inode @ nid 39. [ 26.008492] loop8: detected capacity change from 0 to 219840 [ 26.034486] loop9: detected capacity change from 0 to 169096 [ 26.042847] loop9: p1 p2 p3 [ 26.052445] device-mapper: verity: sha256 using shash "sha256-avx2" [ 26.053501] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 26.054952] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 26.056318] device-mapper: ioctl: error adding target to table [ 26.059079] device-mapper: verity: sha256 using shash "sha256-avx2" [ 26.096023] erofs: (device dm-7): mounted with root inode @ nid 39. [ 30.625042] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 30.666730] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/10/29 00:25:16Z: Amazon SSM Agent v3.3.0.0 is running 2026/10/29 00:25:16Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/10/29 00:25:16Z: OsVersion: 4820.1.0 [!p]104\[?7h78P+q6E616D65\ This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:25:20 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 45.673008] kauditd_printk_skb: 68 callbacks suppressed [ 45.673011] audit: type=1305 audit(1793233528.994:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 45.675676] audit: type=1300 audit(1793233528.994:155): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffc7098f40 a2=420 a3=0 items=0 ppid=2041 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.679853] audit: type=1327 audit(1793233528.994:155): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 45.683439] audit: type=1130 audit(1793233529.010:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.687370] audit: type=1131 audit(1793233529.010:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.690242] audit: type=1106 audit(1793233529.013:158): pid=2035 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 45.693669] audit: type=1104 audit(1793233529.013:159): pid=2035 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 45.844819] audit: type=1106 audit(1793233529.171:160): pid=2030 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 45.851930] audit: type=1104 audit(1793233529.172:161): pid=2030 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 45.856686] audit: type=1131 audit(1793233529.177:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-6-172.31.31.197:22-98.64.94.113:52224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.721059] kauditd_printk_skb: 13 callbacks suppressed [ 53.721063] audit: type=1325 audit(1793233537.048:174): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.725178] audit: type=1300 audit(1793233537.048:174): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd5e3de440 a2=0 a3=0 items=0 ppid=2107 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.731555] audit: type=1327 audit(1793233537.048:174): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.734672] audit: type=1325 audit(1793233537.054:175): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.738094] audit: type=1300 audit(1793233537.054:175): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe1922d240 a2=0 a3=0 items=0 ppid=2107 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.744651] audit: type=1327 audit(1793233537.054:175): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.747213] audit: type=1325 audit(1793233537.057:176): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.749928] audit: type=1300 audit(1793233537.057:176): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef81327a0 a2=0 a3=0 items=0 ppid=2107 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.755426] audit: type=1327 audit(1793233537.057:176): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 53.758515] audit: type=1325 audit(1793233537.060:177): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.960640] Initializing XFRM netlink socket This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:25:38 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:25:39 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 58.780849] kauditd_printk_skb: 90 callbacks suppressed [ 58.780853] audit: type=1130 audit(1793233542.107:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.855290] audit: type=1131 audit(1793233542.182:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 62.038731] audit: type=1131 audit(1793233545.365:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.054016] audit: type=1334 audit(1793233545.381:211): prog-id=32 op=UNLOAD [ 68.485963] audit: type=1130 audit(1793233551.812:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.490500] audit: type=1131 audit(1793233551.812:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.676787] zram_generator::config[2623]: No configuration found. [ 69.092628] audit: type=1334 audit(1793233552.419:214): prog-id=36 op=LOAD [ 69.094287] audit: type=1334 audit(1793233552.419:215): prog-id=37 op=LOAD [ 69.095898] audit: type=1334 audit(1793233552.419:216): prog-id=26 op=UNLOAD [ 69.097434] audit: type=1334 audit(1793233552.419:217): prog-id=27 op=UNLOAD [ 69.099062] audit: type=1334 audit(1793233552.421:218): prog-id=38 op=LOAD [ 69.100469] audit: type=1334 audit(1793233552.421:219): prog-id=19 op=UNLOAD [ 69.102007] audit: type=1334 audit(1793233552.422:220): prog-id=39 op=LOAD [ 69.103469] audit: type=1334 audit(1793233552.422:221): prog-id=16 op=UNLOAD [ 75.543948] zram_generator::config[3012]: No configuration found. [ 75.983587] kauditd_printk_skb: 202 callbacks suppressed [ 75.983591] audit: type=1334 audit(1793233559.310:316): prog-id=86 op=LOAD [ 75.986949] audit: type=1334 audit(1793233559.310:317): prog-id=87 op=LOAD [ 75.988433] audit: type=1334 audit(1793233559.310:318): prog-id=36 op=UNLOAD [ 75.990097] audit: type=1334 audit(1793233559.310:319): prog-id=37 op=UNLOAD [ 75.991576] audit: type=1334 audit(1793233559.311:320): prog-id=88 op=LOAD [ 75.993261] audit: type=1334 audit(1793233559.311:321): prog-id=60 op=UNLOAD [ 75.994760] audit: type=1334 audit(1793233559.313:322): prog-id=89 op=LOAD [ 75.996255] audit: type=1334 audit(1793233559.313:323): prog-id=38 op=UNLOAD [ 75.997752] audit: type=1334 audit(1793233559.314:324): prog-id=90 op=LOAD [ 76.000649] audit: type=1334 audit(1793233559.314:325): prog-id=39 op=UNLOAD [ 81.657233] kauditd_printk_skb: 54 callbacks suppressed [ 81.657237] audit: type=1334 audit(1793233564.984:380): prog-id=112 op=LOAD [ 81.660216] audit: type=1334 audit(1793233564.987:381): prog-id=113 op=LOAD [ 81.661554] audit: type=1300 audit(1793233564.987:381): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=b9c428b1fd8 a2=98 a3=0 items=0 ppid=3438 pid=3450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.666978] audit: type=1327 audit(1793233564.987:381): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865613062333466366431653438336665363738653036663665303361 [ 81.672623] audit: type=1334 audit(1793233564.987:382): prog-id=113 op=UNLOAD [ 81.677085] audit: type=1300 audit(1793233564.987:382): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3438 pid=3450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.682587] audit: type=1327 audit(1793233564.987:382): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865613062333466366431653438336665363738653036663665303361 [ 81.688284] audit: type=1334 audit(1793233564.987:383): prog-id=114 op=LOAD [ 81.689803] audit: type=1300 audit(1793233564.987:383): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=b9c428b2290 a2=98 a3=0 items=0 ppid=3438 pid=3450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.695732] audit: type=1327 audit(1793233564.987:383): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865613062333466366431653438336665363738653036663665303361 [ 89.931916] kauditd_printk_skb: 224 callbacks suppressed [ 89.931920] audit: type=1334 audit(1793233573.258:460): prog-id=130 op=LOAD [ 89.935522] audit: type=1334 audit(1793233573.262:461): prog-id=131 op=LOAD [ 89.936888] audit: type=1300 audit(1793233573.262:461): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3f248d7b5fd8 a2=98 a3=0 items=0 ppid=3438 pid=3761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.942381] audit: type=1327 audit(1793233573.262:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663437343334333263343564323133366230626536376264303564 [ 89.949531] audit: type=1334 audit(1793233573.262:462): prog-id=131 op=UNLOAD [ 89.951214] audit: type=1300 audit(1793233573.262:462): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3438 pid=3761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.956556] audit: type=1327 audit(1793233573.262:462): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663437343334333263343564323133366230626536376264303564 [ 89.962338] audit: type=1334 audit(1793233573.262:463): prog-id=132 op=LOAD [ 89.963969] audit: type=1300 audit(1793233573.262:463): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3f248d7b6290 a2=98 a3=0 items=0 ppid=3438 pid=3761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.969938] audit: type=1327 audit(1793233573.262:463): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663437343334333263343564323133366230626536376264303564 [ 95.170014] kauditd_printk_skb: 5770 callbacks suppressed [ 95.170018] audit: type=1334 audit(1793233578.497:2394): prog-id=1098 op=LOAD [ 95.173286] audit: type=1334 audit(1793233578.500:2395): prog-id=1099 op=LOAD [ 95.174718] audit: type=1300 audit(1793233578.500:2395): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=323e240bdfd8 a2=98 a3=0 items=0 ppid=3480 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.180300] audit: type=1327 audit(1793233578.500:2395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653530656237303765393430353264616131356238316339633865 [ 95.186122] audit: type=1334 audit(1793233578.500:2396): prog-id=1099 op=UNLOAD [ 95.188276] audit: type=1300 audit(1793233578.500:2396): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3480 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.194212] audit: type=1327 audit(1793233578.500:2396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653530656237303765393430353264616131356238316339633865 [ 95.200065] audit: type=1334 audit(1793233578.500:2397): prog-id=1100 op=LOAD [ 95.201577] audit: type=1300 audit(1793233578.500:2397): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=323e240be290 a2=98 a3=0 items=0 ppid=3480 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.207734] audit: type=1327 audit(1793233578.500:2397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653530656237303765393430353264616131356238316339633865 This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:26:22 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 99.200825] NET: Registered PF_ALG protocol family This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:26:23 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 100.443357] eth0: renamed from tmp522ee [ 100.494374] eth0: renamed from tmpcf797 This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:26:24 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 101.633771] kauditd_printk_skb: 228 callbacks suppressed [ 101.633776] audit: type=1334 audit(1793233584.960:2474): prog-id=1117 op=LOAD [ 101.636344] audit: type=1300 audit(1793233584.960:2474): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe925c6790 a2=74 a3=7ffe925c6790 items=0 ppid=3947 pid=4473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.644017] audit: type=1327 audit(1793233584.960:2474): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003530325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.650352] audit: type=1334 audit(1793233584.960:2475): prog-id=1117 op=UNLOAD [ 101.653326] audit: type=1300 audit(1793233584.960:2475): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe925c6790 a2=74 a3=7ffe925c6790 items=0 ppid=3947 pid=4473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.653504] audit: type=1327 audit(1793233584.960:2475): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003530325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.653597] audit: type=1334 audit(1793233584.960:2476): prog-id=1118 op=LOAD [ 101.664618] audit: type=1300 audit(1793233584.960:2476): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe925c6720 a2=80 a3=0 items=0 ppid=3947 pid=4473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.664624] audit: type=1327 audit(1793233584.960:2476): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003530325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.664629] audit: type=1334 audit(1793233584.960:2477): prog-id=1118 op=UNLOAD This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:26:25 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:26:26 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 106.694604] kauditd_printk_skb: 579 callbacks suppressed [ 106.694608] audit: type=1325 audit(1793233590.021:2673): table=filter:148 family=2 entries=11 op=nft_register_rule pid=4650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.698768] audit: type=1300 audit(1793233590.021:2673): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe76dd2f90 a2=0 a3=7ffe76dd2f7c items=0 ppid=3582 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.704994] audit: type=1327 audit(1793233590.021:2673): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.712039] audit: type=1325 audit(1793233590.038:2674): table=nat:149 family=2 entries=45 op=nft_register_chain pid=4650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.715189] audit: type=1300 audit(1793233590.038:2674): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffe76dd2f90 a2=0 a3=7ffe76dd2f7c items=0 ppid=3582 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.722114] audit: type=1327 audit(1793233590.038:2674): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 140.789784] audit: type=1130 audit(1793233624.116:2675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4098-172.31.31.197:22-98.64.94.113:33282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.667346] audit: type=1101 audit(1793233624.994:2676): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.674144] audit: type=1103 audit(1793233625.001:2677): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.680249] audit: type=1006 audit(1793233625.001:2678): pid=4661 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 141.684135] audit: type=1300 audit(1793233625.001:2678): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdaafe1300 a2=3 a3=0 items=0 ppid=1 pid=4661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.690165] audit: type=1327 audit(1793233625.001:2678): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 141.707646] audit: type=1105 audit(1793233625.034:2679): pid=4661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.714495] audit: type=1103 audit(1793233625.039:2680): pid=4665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 142.829046] audit: type=1106 audit(1793233626.156:2681): pid=4661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 142.836922] audit: type=1104 audit(1793233626.156:2682): pid=4661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 147.995615] kauditd_printk_skb: 1 callbacks suppressed [ 147.995619] audit: type=1130 audit(1793233631.321:2684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4099-172.31.31.197:22-98.64.94.113:44196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.814905] audit: type=1101 audit(1793233632.141:2685): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.823097] audit: type=1103 audit(1793233632.150:2686): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.829051] audit: type=1006 audit(1793233632.150:2687): pid=4680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 148.832071] audit: type=1300 audit(1793233632.150:2687): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe4fc565b0 a2=3 a3=0 items=0 ppid=1 pid=4680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.838490] audit: type=1327 audit(1793233632.150:2687): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 148.856387] audit: type=1105 audit(1793233632.183:2688): pid=4680 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.863152] audit: type=1103 audit(1793233632.189:2689): pid=4684 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 149.370812] audit: type=1106 audit(1793233632.697:2690): pid=4680 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 149.378509] audit: type=1104 audit(1793233632.697:2691): pid=4680 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 154.534565] kauditd_printk_skb: 1 callbacks suppressed [ 154.534569] audit: type=1130 audit(1793233637.861:2693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4100-172.31.31.197:22-98.64.94.113:44206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.356560] audit: type=1101 audit(1793233638.683:2694): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 155.363815] audit: type=1103 audit(1793233638.683:2695): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 155.370469] audit: type=1006 audit(1793233638.683:2696): pid=4697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 155.373330] audit: type=1300 audit(1793233638.683:2696): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc68b1eaf0 a2=3 a3=0 items=0 ppid=1 pid=4697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.378644] audit: type=1327 audit(1793233638.683:2696): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 155.386071] audit: type=1105 audit(1793233638.713:2697): pid=4697 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 155.395500] audit: type=1103 audit(1793233638.717:2698): pid=4702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 155.907805] audit: type=1106 audit(1793233639.234:2699): pid=4697 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 155.915429] audit: type=1104 audit(1793233639.235:2700): pid=4697 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.075195] kauditd_printk_skb: 1 callbacks suppressed [ 161.075200] audit: type=1130 audit(1793233644.402:2702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.31.197:22-98.64.94.113:47422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.907142] audit: type=1101 audit(1793233645.234:2703): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.913435] audit: type=1103 audit(1793233645.235:2704): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.919393] audit: type=1006 audit(1793233645.235:2705): pid=4717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 161.922583] audit: type=1300 audit(1793233645.235:2705): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5648d050 a2=3 a3=0 items=0 ppid=1 pid=4717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.928678] audit: type=1327 audit(1793233645.235:2705): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 161.937087] audit: type=1105 audit(1793233645.264:2706): pid=4717 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.943735] audit: type=1103 audit(1793233645.270:2707): pid=4721 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.444159] audit: type=1106 audit(1793233645.770:2708): pid=4717 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.453057] audit: type=1104 audit(1793233645.770:2709): pid=4717 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 170.723455] kauditd_printk_skb: 23 callbacks suppressed [ 170.723459] audit: type=1130 audit(1793233654.050:2729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10-172.31.31.197:22-98.64.94.113:34500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.553004] audit: type=1101 audit(1793233654.880:2730): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.558502] audit: type=1103 audit(1793233654.884:2731): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.563786] audit: type=1006 audit(1793233654.884:2732): pid=4764 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 171.567489] audit: type=1300 audit(1793233654.884:2732): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc7f1d5560 a2=3 a3=0 items=0 ppid=1 pid=4764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.573535] audit: type=1327 audit(1793233654.884:2732): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 171.582034] audit: type=1105 audit(1793233654.909:2733): pid=4764 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.588767] audit: type=1103 audit(1793233654.912:2734): pid=4768 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 172.108735] audit: type=1106 audit(1793233655.435:2735): pid=4764 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 172.117468] audit: type=1104 audit(1793233655.435:2736): pid=4764 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 176.049283] kauditd_printk_skb: 20 callbacks suppressed [ 176.049287] audit: type=1325 audit(1793233659.376:2753): table=filter:150 family=2 entries=20 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.056288] audit: type=1300 audit(1793233659.376:2753): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffedd712fe0 a2=0 a3=7ffedd712fcc items=0 ppid=3582 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.068270] audit: type=1327 audit(1793233659.376:2753): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 176.075936] audit: type=1325 audit(1793233659.394:2754): table=nat:151 family=2 entries=18 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.079181] audit: type=1300 audit(1793233659.394:2754): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffedd712fe0 a2=0 a3=0 items=0 ppid=3582 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.085090] audit: type=1327 audit(1793233659.394:2754): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 176.249717] audit: type=1106 audit(1793233659.576:2755): pid=4796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 176.255993] audit: type=1104 audit(1793233659.576:2756): pid=4796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 176.261237] audit: type=1131 audit(1793233659.585:2757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-12-172.31.31.197:22-98.64.94.113:34524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.416493] audit: type=1130 audit(1793233659.741:2758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-13-172.31.31.197:22-98.64.94.113:56808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.015107] kauditd_printk_skb: 27 callbacks suppressed [ 182.015112] audit: type=1325 audit(1793233665.342:2778): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.019641] audit: type=1300 audit(1793233665.342:2778): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc30595c60 a2=0 a3=7ffc30595c4c items=0 ppid=3582 pid=4847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.025558] audit: type=1327 audit(1793233665.342:2778): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 182.028187] audit: type=1325 audit(1793233665.350:2779): table=nat:155 family=2 entries=102 op=nft_register_chain pid=4847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.032987] audit: type=1300 audit(1793233665.350:2779): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffc30595c60 a2=0 a3=7ffc30595c4c items=0 ppid=3582 pid=4847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.040072] audit: type=1327 audit(1793233665.350:2779): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 184.637717] audit: type=1130 audit(1793233667.964:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-14-172.31.31.197:22-98.64.94.113:56838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.462878] audit: type=1101 audit(1793233668.789:2781): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 185.469100] audit: type=1103 audit(1793233668.792:2782): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 185.475233] audit: type=1006 audit(1793233668.792:2783): pid=4850 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 191.165687] kauditd_printk_skb: 7 callbacks suppressed [ 191.165691] audit: type=1130 audit(1793233674.492:2789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4102-172.31.31.197:22-98.64.94.113:54098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.987813] audit: type=1101 audit(1793233675.314:2790): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 191.994803] audit: type=1103 audit(1793233675.314:2791): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 192.000892] audit: type=1006 audit(1793233675.314:2792): pid=4866 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 192.004006] audit: type=1300 audit(1793233675.314:2792): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff562244d0 a2=3 a3=0 items=0 ppid=1 pid=4866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.010739] audit: type=1327 audit(1793233675.314:2792): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 192.019147] audit: type=1105 audit(1793233675.346:2793): pid=4866 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 192.025855] audit: type=1103 audit(1793233675.349:2794): pid=4871 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 192.537140] audit: type=1106 audit(1793233675.864:2795): pid=4866 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 192.545535] audit: type=1104 audit(1793233675.865:2796): pid=4866 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:27:59 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 197.332491] kauditd_printk_skb: 17 callbacks suppressed [ 197.332496] audit: type=1106 audit(1793233680.659:2812): pid=4884 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 197.341139] audit: type=1104 audit(1793233680.668:2813): pid=4884 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 197.352474] audit: type=1131 audit(1793233680.679:2814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4103-172.31.31.197:22-98.64.94.113:54106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.496509] audit: type=1130 audit(1793233680.823:2815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-15-172.31.31.197:22-98.64.94.113:39524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.427272] audit: type=1101 audit(1793233681.754:2816): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.434673] audit: type=1103 audit(1793233681.756:2817): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.446397] audit: type=1006 audit(1793233681.756:2818): pid=5033 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 198.459807] audit: type=1300 audit(1793233681.756:2818): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffc9eab720 a2=3 a3=0 items=0 ppid=1 pid=5033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.472889] audit: type=1327 audit(1793233681.756:2818): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 198.524659] audit: type=1105 audit(1793233681.852:2819): pid=5033 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 202.744840] kauditd_printk_skb: 86 callbacks suppressed [ 202.744844] audit: type=1101 audit(1793233686.071:2862): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 202.755985] audit: type=1103 audit(1793233686.073:2863): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 202.762919] audit: type=1006 audit(1793233686.073:2864): pid=5192 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 202.766564] audit: type=1300 audit(1793233686.073:2864): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd881b350 a2=3 a3=0 items=0 ppid=1 pid=5192 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.772360] audit: type=1327 audit(1793233686.073:2864): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 202.784450] audit: type=1334 audit(1793233686.111:2865): prog-id=1254 op=LOAD [ 202.787027] audit: type=1300 audit(1793233686.111:2865): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=2fd07f85e290 a2=98 a3=0 items=0 ppid=5062 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.793272] audit: type=1327 audit(1793233686.111:2865): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465383833323638643763303763303939386534623033346366356463 [ 202.803111] audit: type=1334 audit(1793233686.113:2866): prog-id=1255 op=LOAD [ 202.804580] audit: type=1300 audit(1793233686.113:2866): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fd07f85dfe8 a2=98 a3=0 items=0 ppid=5062 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.872505] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 208.054757] kauditd_printk_skb: 5735 callbacks suppressed [ 208.054761] audit: type=1334 audit(1793233691.381:4768): prog-id=2212 op=LOAD [ 208.057507] audit: type=1300 audit(1793233691.381:4768): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffff0d35030 a2=74 a3=7ffff0d35030 items=0 ppid=5449 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.063340] audit: type=1327 audit(1793233691.381:4768): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 208.067780] audit: type=1334 audit(1793233691.381:4769): prog-id=2212 op=UNLOAD [ 208.069206] audit: type=1300 audit(1793233691.381:4769): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffff0d35030 a2=74 a3=7ffff0d35030 items=0 ppid=5449 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.075636] audit: type=1327 audit(1793233691.381:4769): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 208.080506] audit: type=1334 audit(1793233691.381:4770): prog-id=2213 op=LOAD [ 208.081972] audit: type=1300 audit(1793233691.381:4770): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffff0d34fc0 a2=80 a3=0 items=0 ppid=5449 pid=5547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 208.088044] audit: type=1327 audit(1793233691.381:4770): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 208.092755] audit: type=1334 audit(1793233691.381:4771): prog-id=2213 op=UNLOAD This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:28:13 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:28:14 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: This is ip-172-31-31-197 (Linux x86_64 6.12.114-flatcar) 00:28:15 SSH host key: SHA256:Lih1WotHZpQU54hCXoqaCWOtw1V0VayhDI0ynpHBk/g (ED25519) SSH host key: SHA256:+7x5slg/6yXFJErDEk/Z13QzX/rk3wRRCCmCvbLk/qI (RSA) SSH host key: SHA256:BbOY4SQzNiBOk+AT3U4OPBy9mDlWFachQk07TOqKBP8 (MLDSA44-ED25519) SSH host key: SHA256:C1ZxLfiT73Y0jF1qWfdJDs82yjT554RZLjgMxb/6NR0 (ECDSA) eth0: 172.31.31.197 fe80::4ff:e3ff:fe66:e00d%eth0 ip-172-31-31-197 login: [ 214.271169] kauditd_printk_skb: 560 callbacks suppressed [ 214.271173] audit: type=1334 audit(1793233697.598:4966): prog-id=2250 op=LOAD [ 214.273929] audit: type=1300 audit(1793233697.598:4966): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffeb82ce450 a2=74 a3=7ffeb82ce450 items=0 ppid=5298 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.283815] audit: type=1327 audit(1793233697.598:4966): proctitle=74630066696C746572007265706C61636500646576006C786333656165376665373433353400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313034385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 214.290273] audit: type=1334 audit(1793233697.598:4967): prog-id=2250 op=UNLOAD [ 214.291659] audit: type=1300 audit(1793233697.598:4967): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffeb82ce450 a2=74 a3=7ffeb82ce450 items=0 ppid=5298 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.299432] audit: type=1327 audit(1793233697.598:4967): proctitle=74630066696C746572007265706C61636500646576006C786333656165376665373433353400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313034385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 214.303037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.304580] audit: type=1334 audit(1793233697.598:4968): prog-id=2251 op=LOAD [ 214.304730] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 214.304732] audit: backlog limit exceeded