=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.339589] audit: type=1334 audit(1777303682.266:151): prog-id=29 op=LOAD [ 22.339647] audit: type=1334 audit(1777303682.266:152): prog-id=30 op=LOAD [ 22.693993] audit: type=1130 audit(1777303682.624:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.700981] audit: type=1334 audit(1777303682.627:154): prog-id=31 op=LOAD [ 22.702980] audit: type=1334 audit(1777303682.631:155): prog-id=7 op=UNLOAD [ 23.082353] mousedev: PS/2 mouse device common for all mice [ 23.093855] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 23.100080] ACPI: button: Power Button [PWRF] [ 23.108052] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 23.119562] ACPI: button: Sleep Button [SLPF] [ 23.148237] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 23.485119] erofs: (device dm-5): mounted with root inode @ nid 40. [ 23.526328] loop6: detected capacity change from 0 to 43472 [ 23.530702] loop6: p1 p2 p3 [ 23.573415] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.574912] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.577983] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.581087] device-mapper: ioctl: error adding target to table [ 23.586221] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.708045] erofs: (device dm-5): mounted with root inode @ nid 40. [ 23.721246] device-mapper: ioctl: remove_all left 5 open device(s) [ 23.748339] loop6: detected capacity change from 0 to 178200 [ 23.755552] loop6: p1 p2 p3 [ 23.759663] loop6: p1 p2 p3 [ 23.782352] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.783436] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.784997] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.786361] device-mapper: ioctl: error adding target to table [ 23.789834] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.835472] erofs: (device dm-5): mounted with root inode @ nid 39. [ 23.854471] loop6: detected capacity change from 0 to 291952 [ 23.859001] loop6: p1 p2 p3 [ 23.884125] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.885474] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.887290] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.888897] device-mapper: ioctl: error adding target to table [ 23.893138] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.961551] erofs: (device dm-5): mounted with root inode @ nid 39. [ 23.980851] loop6: detected capacity change from 0 to 378016 [ 23.982405] loop6: p1 p2 p3 [ 24.016064] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.017150] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.018548] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.019994] device-mapper: ioctl: error adding target to table [ 24.022243] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.091098] erofs: (device dm-5): mounted with root inode @ nid 39. [ 24.114752] loop6: detected capacity change from 0 to 217752 [ 24.183609] loop6: detected capacity change from 0 to 178200 [ 24.189074] loop6: p1 p2 p3 [ 24.211667] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.213026] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.216425] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.218069] device-mapper: ioctl: error adding target to table [ 24.222918] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.272374] erofs: (device dm-5): mounted with root inode @ nid 39. [ 24.276371] loop7: detected capacity change from 0 to 291952 [ 24.278500] loop7: p1 p2 p3 [ 24.297081] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.298146] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.299485] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 24.300868] device-mapper: ioctl: error adding target to table [ 24.303173] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.344010] erofs: (device dm-6): mounted with root inode @ nid 39. [ 24.349513] loop8: detected capacity change from 0 to 378016 [ 24.354123] loop8: p1 p2 p3 [ 24.394303] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.395362] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.396694] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 24.398214] device-mapper: ioctl: error adding target to table [ 24.400259] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.470925] erofs: (device dm-7): mounted with root inode @ nid 39. [ 24.477668] loop9: detected capacity change from 0 to 217752 [ 24.531067] device-mapper: ioctl: remove_all left 5 open device(s) [ 24.532362] device-mapper: ioctl: remove_all left 5 open device(s) [ 28.577991] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 28.623414] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/04/27 15:28:11Z: Amazon SSM Agent v3.3.0.0 is running 2026/04/27 15:28:11Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/04/27 15:28:11Z: OsVersion: 9999.9.112 [!p]104[?7hP+q6E616D65\ This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:28:16 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:28:16 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 44.532768] kauditd_printk_skb: 16 callbacks suppressed [ 44.532773] audit: type=1305 audit(1777303705.385:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 44.536043] audit: type=1300 audit(1777303705.385:170): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd954746c0 a2=420 a3=0 items=0 ppid=2259 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 44.540406] audit: type=1327 audit(1777303705.385:170): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 44.542180] audit: type=1130 audit(1777303705.387:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.545060] audit: type=1131 audit(1777303705.387:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.547980] audit: type=1106 audit(1777303705.393:173): pid=2253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 44.551735] audit: type=1104 audit(1777303705.393:174): pid=2253 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 44.709271] audit: type=1106 audit(1777303705.561:175): pid=2248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 44.716141] audit: type=1104 audit(1777303705.561:176): pid=2248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 44.721364] audit: type=1131 audit(1777303705.564:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.20.238:22-4.175.71.9:60206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.466703] Initializing XFRM netlink socket [ 54.585913] kauditd_printk_skb: 13 callbacks suppressed [ 54.585918] audit: type=1325 audit(1777303715.438:189): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 54.590276] audit: type=1300 audit(1777303715.438:189): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffb0db19f0 a2=0 a3=0 items=0 ppid=2327 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.597468] audit: type=1327 audit(1777303715.438:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 54.600559] audit: type=1325 audit(1777303715.441:190): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 54.604048] audit: type=1300 audit(1777303715.441:190): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd7f944cb0 a2=0 a3=0 items=0 ppid=2327 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.610159] audit: type=1327 audit(1777303715.441:190): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 54.612652] audit: type=1325 audit(1777303715.443:191): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2381 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 54.615481] audit: type=1300 audit(1777303715.443:191): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff82a3af40 a2=0 a3=0 items=0 ppid=2327 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.621487] audit: type=1327 audit(1777303715.443:191): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 54.624608] audit: type=1325 audit(1777303715.445:192): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:28:36 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:28:36 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 59.820521] kauditd_printk_skb: 107 callbacks suppressed [ 59.820526] audit: type=1131 audit(1777303720.673:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.834079] audit: type=1334 audit(1777303720.687:231): prog-id=35 op=UNLOAD [ 66.823197] audit: type=1130 audit(1777303727.676:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.920285] audit: type=1131 audit(1777303727.773:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 66.926500] audit: type=1130 audit(1777303727.778:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.931304] audit: type=1131 audit(1777303727.778:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.139872] zram_generator::config[2847]: No configuration found. [ 67.157156] systemd-ssh-generator[2843]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 67.501854] audit: type=1334 audit(1777303728.354:236): prog-id=39 op=LOAD [ 67.503430] audit: type=1334 audit(1777303728.354:237): prog-id=26 op=UNLOAD [ 67.505109] audit: type=1334 audit(1777303728.354:238): prog-id=40 op=LOAD [ 67.506654] audit: type=1334 audit(1777303728.355:239): prog-id=41 op=LOAD [ 67.508212] audit: type=1334 audit(1777303728.355:240): prog-id=27 op=UNLOAD [ 67.509710] audit: type=1334 audit(1777303728.355:241): prog-id=28 op=UNLOAD [ 77.975890] zram_generator::config[3424]: No configuration found. [ 78.030613] systemd-ssh-generator[3420]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 78.375251] kauditd_printk_skb: 204 callbacks suppressed [ 78.375255] audit: type=1334 audit(1777303739.228:338): prog-id=89 op=LOAD [ 78.378420] audit: type=1334 audit(1777303739.228:339): prog-id=39 op=UNLOAD [ 78.379945] audit: type=1334 audit(1777303739.228:340): prog-id=90 op=LOAD [ 78.381766] audit: type=1334 audit(1777303739.228:341): prog-id=91 op=LOAD [ 78.383394] audit: type=1334 audit(1777303739.228:342): prog-id=40 op=UNLOAD [ 78.385022] audit: type=1334 audit(1777303739.228:343): prog-id=41 op=UNLOAD [ 78.386518] audit: type=1334 audit(1777303739.229:344): prog-id=92 op=LOAD [ 78.388094] audit: type=1334 audit(1777303739.229:345): prog-id=42 op=UNLOAD [ 78.389513] audit: type=1334 audit(1777303739.229:346): prog-id=93 op=LOAD [ 78.391030] audit: type=1334 audit(1777303739.229:347): prog-id=94 op=LOAD [ 83.385534] kauditd_printk_skb: 51 callbacks suppressed [ 83.385537] audit: type=1106 audit(1777303744.238:399): pid=2287 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 83.401153] audit: type=1104 audit(1777303744.238:400): pid=2287 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 83.405378] audit: type=1131 audit(1777303744.239:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-5-172.31.20.238:22-4.175.71.9:33380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.445410] audit: type=1334 audit(1777303745.297:402): prog-id=115 op=LOAD [ 84.446787] audit: type=1334 audit(1777303745.298:403): prog-id=116 op=LOAD [ 84.449625] audit: type=1300 audit(1777303745.298:403): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000228240 a2=98 a3=0 items=0 ppid=3569 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.457354] audit: type=1327 audit(1777303745.298:403): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373936656535636236663535333738303238363162383733376637 [ 84.463215] audit: type=1334 audit(1777303745.298:404): prog-id=116 op=UNLOAD [ 84.464772] audit: type=1300 audit(1777303745.298:404): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3569 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.474169] audit: type=1327 audit(1777303745.298:404): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663373936656535636236663535333738303238363162383733376637 [ 94.162416] kauditd_printk_skb: 227 callbacks suppressed [ 94.162421] audit: type=1334 audit(1777303755.015:482): prog-id=133 op=LOAD [ 94.165489] audit: type=1334 audit(1777303755.016:483): prog-id=134 op=LOAD [ 94.167491] audit: type=1300 audit(1777303755.016:483): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138240 a2=98 a3=0 items=0 ppid=3569 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.174317] audit: type=1327 audit(1777303755.016:483): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346436303535343561613330363330653836373132316539643436 [ 94.179727] audit: type=1334 audit(1777303755.016:484): prog-id=134 op=UNLOAD [ 94.181305] audit: type=1300 audit(1777303755.016:484): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3569 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.187002] audit: type=1327 audit(1777303755.016:484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346436303535343561613330363330653836373132316539643436 [ 94.192943] audit: type=1334 audit(1777303755.021:485): prog-id=135 op=LOAD [ 94.194603] audit: type=1300 audit(1777303755.021:485): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138490 a2=98 a3=0 items=0 ppid=3569 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.201048] audit: type=1327 audit(1777303755.021:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530346436303535343561613330363330653836373132316539643436 [ 101.159048] kauditd_printk_skb: 122 callbacks suppressed [ 101.159052] audit: type=1334 audit(1777303762.012:534): prog-id=161 op=LOAD [ 101.161401] audit: type=1300 audit(1777303762.012:534): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffeebd9d30 a2=74 a3=7fffeebd9d30 items=0 ppid=4122 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.167235] audit: type=1327 audit(1777303762.012:534): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.169223] audit: type=1334 audit(1777303762.012:535): prog-id=161 op=UNLOAD [ 101.170503] audit: type=1300 audit(1777303762.012:535): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7fffeebd9d30 a2=74 a3=7fffeebd9d30 items=0 ppid=4122 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.175961] audit: type=1327 audit(1777303762.012:535): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.178035] audit: type=1334 audit(1777303762.012:536): prog-id=162 op=LOAD [ 101.179246] audit: type=1300 audit(1777303762.012:536): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffeebd8db0 a2=90 a3=2 items=0 ppid=4122 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.185308] audit: type=1327 audit(1777303762.012:536): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.187349] audit: type=1334 audit(1777303762.012:537): prog-id=162 op=UNLOAD This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:26 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:26 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:27 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:27 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:28 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:28 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 108.301312] NET: Registered PF_ALG protocol family [ 108.310956] kauditd_printk_skb: 5660 callbacks suppressed [ 108.310961] audit: type=1334 audit(1777303769.162:2424): prog-id=1106 op=LOAD [ 108.314331] audit: type=1300 audit(1777303769.162:2424): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe655baab0 a2=74 a3=7ffe655baab0 items=0 ppid=4251 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.320886] audit: type=1327 audit(1777303769.162:2424): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 108.324878] audit: type=1334 audit(1777303769.162:2425): prog-id=1106 op=UNLOAD [ 108.326344] audit: type=1300 audit(1777303769.162:2425): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe655baab0 a2=74 a3=7ffe655baab0 items=0 ppid=4251 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.332209] audit: type=1327 audit(1777303769.162:2425): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 108.336823] audit: type=1334 audit(1777303769.162:2426): prog-id=1107 op=LOAD [ 108.339278] audit: type=1300 audit(1777303769.162:2426): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe655baa40 a2=80 a3=0 items=0 ppid=4251 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.345329] audit: type=1327 audit(1777303769.162:2426): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 108.350748] audit: type=1334 audit(1777303769.163:2427): prog-id=1107 op=UNLOAD [ 109.630479] eth0: renamed from tmp56105 [ 109.650057] eth0: renamed from tmp5d32f This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:32 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:32 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:33 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:29:33 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 113.958445] kauditd_printk_skb: 323 callbacks suppressed [ 113.958449] audit: type=1334 audit(1777303774.811:2535): prog-id=1144 op=LOAD [ 113.962065] audit: type=1334 audit(1777303774.812:2536): prog-id=1145 op=LOAD [ 113.963556] audit: type=1300 audit(1777303774.812:2536): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc413f8e50 a2=74 a3=7ffc413f8e50 items=0 ppid=4122 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.969733] audit: type=1327 audit(1777303774.812:2536): proctitle=74630066696C746572007265706C61636500646576006C786365383138623032333232656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333230365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.974037] audit: type=1334 audit(1777303774.812:2537): prog-id=1145 op=UNLOAD [ 113.975268] audit: type=1300 audit(1777303774.812:2537): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc413f8e50 a2=74 a3=7ffc413f8e50 items=0 ppid=4122 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.980457] audit: type=1327 audit(1777303774.812:2537): proctitle=74630066696C746572007265706C61636500646576006C786365383138623032333232656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333230365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.984946] audit: type=1334 audit(1777303774.812:2538): prog-id=1146 op=LOAD [ 113.986241] audit: type=1300 audit(1777303774.812:2538): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc413f8de0 a2=80 a3=0 items=0 ppid=4122 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.992506] audit: type=1327 audit(1777303774.812:2538): proctitle=74630066696C746572007265706C61636500646576006C786365383138623032333232656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333230365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 144.489663] kauditd_printk_skb: 468 callbacks suppressed [ 144.489667] audit: type=1130 audit(1777303805.342:2697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4099-172.31.20.238:22-4.175.71.9:60160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.395179] audit: type=1101 audit(1777303806.248:2698): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 145.401381] audit: type=1103 audit(1777303806.250:2699): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 145.407145] audit: type=1006 audit(1777303806.250:2700): pid=4800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 145.410655] audit: type=1300 audit(1777303806.250:2700): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc417de6f0 a2=3 a3=0 items=0 ppid=1 pid=4800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.418055] audit: type=1327 audit(1777303806.250:2700): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 145.427090] audit: type=1105 audit(1777303806.280:2701): pid=4800 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 145.435249] audit: type=1103 audit(1777303806.288:2702): pid=4804 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 146.602866] audit: type=1106 audit(1777303807.455:2703): pid=4800 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 146.609216] audit: type=1104 audit(1777303807.455:2704): pid=4800 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 151.783511] kauditd_printk_skb: 1 callbacks suppressed [ 151.783515] audit: type=1130 audit(1777303812.636:2706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-172.31.20.238:22-4.175.71.9:60274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.669129] audit: type=1101 audit(1777303813.522:2707): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 152.675450] audit: type=1103 audit(1777303813.523:2708): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 152.680923] audit: type=1006 audit(1777303813.524:2709): pid=4819 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 152.685551] audit: type=1300 audit(1777303813.524:2709): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1c1661d0 a2=3 a3=0 items=0 ppid=1 pid=4819 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.691460] audit: type=1327 audit(1777303813.524:2709): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 152.698959] audit: type=1105 audit(1777303813.552:2710): pid=4819 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 152.705688] audit: type=1103 audit(1777303813.555:2711): pid=4823 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 153.252687] audit: type=1106 audit(1777303814.105:2712): pid=4819 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 153.259706] audit: type=1104 audit(1777303814.105:2713): pid=4819 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 158.414543] kauditd_printk_skb: 1 callbacks suppressed [ 158.414547] audit: type=1130 audit(1777303819.267:2715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.20.238:22-4.175.71.9:55274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.263063] audit: type=1101 audit(1777303820.116:2716): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 159.270075] audit: type=1103 audit(1777303820.118:2717): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 159.275848] audit: type=1006 audit(1777303820.118:2718): pid=4836 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 159.279020] audit: type=1300 audit(1777303820.118:2718): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff5a9f4440 a2=3 a3=0 items=0 ppid=1 pid=4836 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.285117] audit: type=1327 audit(1777303820.118:2718): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.293063] audit: type=1105 audit(1777303820.146:2719): pid=4836 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 159.300321] audit: type=1103 audit(1777303820.153:2720): pid=4841 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 159.822751] audit: type=1106 audit(1777303820.675:2721): pid=4836 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 159.829191] audit: type=1104 audit(1777303820.675:2722): pid=4836 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.212251] kauditd_printk_skb: 23 callbacks suppressed [ 168.212334] audit: type=1130 audit(1777303829.065:2742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-172.31.20.238:22-4.175.71.9:50534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.060793] audit: type=1101 audit(1777303829.913:2743): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 169.067626] audit: type=1103 audit(1777303829.913:2744): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 169.073203] audit: type=1006 audit(1777303829.913:2745): pid=4884 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 169.077062] audit: type=1300 audit(1777303829.913:2745): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1bde6ad0 a2=3 a3=0 items=0 ppid=1 pid=4884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.083104] audit: type=1327 audit(1777303829.913:2745): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 169.090135] audit: type=1105 audit(1777303829.943:2746): pid=4884 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 169.096836] audit: type=1103 audit(1777303829.947:2747): pid=4888 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 169.613214] audit: type=1106 audit(1777303830.466:2748): pid=4884 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 169.622036] audit: type=1104 audit(1777303830.466:2749): pid=4884 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 174.796816] kauditd_printk_skb: 1 callbacks suppressed [ 174.796820] audit: type=1130 audit(1777303835.649:2751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4101-172.31.20.238:22-4.175.71.9:50818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.671174] audit: type=1101 audit(1777303836.524:2752): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 175.677813] audit: type=1103 audit(1777303836.526:2753): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 175.683397] audit: type=1006 audit(1777303836.526:2754): pid=4900 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 175.687276] audit: type=1300 audit(1777303836.526:2754): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb942d990 a2=3 a3=0 items=0 ppid=1 pid=4900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.694004] audit: type=1327 audit(1777303836.526:2754): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.703537] audit: type=1105 audit(1777303836.556:2755): pid=4900 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 175.710382] audit: type=1103 audit(1777303836.559:2756): pid=4904 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 176.242983] audit: type=1106 audit(1777303837.094:2757): pid=4900 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 176.249709] audit: type=1104 audit(1777303837.094:2758): pid=4900 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 179.797848] kauditd_printk_skb: 19 callbacks suppressed [ 179.797854] audit: type=1103 audit(1777303840.650:2774): pid=4936 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 180.949536] audit: type=1325 audit(1777303841.802:2775): table=filter:155 family=2 entries=20 op=nft_register_rule pid=4945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.952970] audit: type=1300 audit(1777303841.802:2775): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffb0a01770 a2=0 a3=7fffb0a0175c items=0 ppid=3661 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.960231] audit: type=1327 audit(1777303841.802:2775): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.966029] audit: type=1325 audit(1777303841.818:2776): table=nat:156 family=2 entries=18 op=nft_register_rule pid=4945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.969700] audit: type=1300 audit(1777303841.818:2776): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fffb0a01770 a2=0 a3=0 items=0 ppid=3661 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.977780] audit: type=1327 audit(1777303841.818:2776): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.152721] audit: type=1106 audit(1777303842.005:2777): pid=4932 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 181.161596] audit: type=1104 audit(1777303842.005:2778): pid=4932 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 181.171630] audit: type=1131 audit(1777303842.024:2779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4103-172.31.20.238:22-4.175.71.9:50840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.145328] kauditd_printk_skb: 28 callbacks suppressed [ 189.145340] audit: type=1325 audit(1777303849.998:2800): table=filter:159 family=2 entries=20 op=nft_register_rule pid=4982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 189.150247] audit: type=1300 audit(1777303849.998:2800): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff2e3d6de0 a2=0 a3=7fff2e3d6dcc items=0 ppid=3661 pid=4982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.157584] audit: type=1327 audit(1777303849.998:2800): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 189.160740] audit: type=1325 audit(1777303850.012:2801): table=nat:160 family=2 entries=102 op=nft_register_chain pid=4982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 189.163644] audit: type=1300 audit(1777303850.012:2801): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7fff2e3d6de0 a2=0 a3=7fff2e3d6dcc items=0 ppid=3661 pid=4982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.169554] audit: type=1327 audit(1777303850.012:2801): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 189.680606] audit: type=1130 audit(1777303850.533:2802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4105-172.31.20.238:22-4.175.71.9:50944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.526177] audit: type=1101 audit(1777303851.379:2803): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 190.532339] audit: type=1103 audit(1777303851.381:2804): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 190.537784] audit: type=1006 audit(1777303851.382:2805): pid=4984 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 196.263253] kauditd_printk_skb: 7 callbacks suppressed [ 196.263256] audit: type=1130 audit(1777303857.116:2811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-11-172.31.20.238:22-4.175.71.9:46418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.144810] audit: type=1101 audit(1777303857.997:2812): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.150909] audit: type=1103 audit(1777303858.000:2813): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.158833] audit: type=1006 audit(1777303858.000:2814): pid=5000 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 197.162256] audit: type=1300 audit(1777303858.000:2814): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff5b6b04f0 a2=3 a3=0 items=0 ppid=1 pid=5000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.172288] audit: type=1327 audit(1777303858.000:2814): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.177164] audit: type=1105 audit(1777303858.030:2815): pid=5000 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.184071] audit: type=1103 audit(1777303858.033:2816): pid=5004 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.718661] audit: type=1106 audit(1777303858.571:2817): pid=5000 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.725524] audit: type=1104 audit(1777303858.571:2818): pid=5000 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 201.352747] kauditd_printk_skb: 15 callbacks suppressed [ 201.352751] audit: type=1334 audit(1777303862.205:2832): prog-id=115 op=UNLOAD [ 201.357078] audit: type=1334 audit(1777303862.205:2833): prog-id=119 op=UNLOAD This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:31:02 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:31:02 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 202.604785] audit: type=1106 audit(1777303863.457:2834): pid=5016 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 202.612329] audit: type=1104 audit(1777303863.457:2835): pid=5016 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 202.619116] audit: type=1131 audit(1777303863.464:2836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4106-172.31.20.238:22-4.175.71.9:46422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.772146] audit: type=1130 audit(1777303863.624:2837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-12-172.31.20.238:22-4.175.71.9:46432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.651310] audit: type=1101 audit(1777303864.504:2838): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 203.657188] audit: type=1103 audit(1777303864.506:2839): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 203.662638] audit: type=1006 audit(1777303864.506:2840): pid=5172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 203.665702] audit: type=1300 audit(1777303864.506:2840): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb39a8f90 a2=3 a3=0 items=0 ppid=1 pid=5172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.591438] kauditd_printk_skb: 84 callbacks suppressed [ 206.591442] audit: type=1106 audit(1777303867.444:2880): pid=5207 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 206.599015] audit: type=1104 audit(1777303867.444:2881): pid=5207 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 206.604012] audit: type=1131 audit(1777303867.452:2882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-13-172.31.20.238:22-4.175.71.9:41856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.770440] audit: type=1130 audit(1777303867.623:2883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-14-172.31.20.238:22-4.175.71.9:41860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.964207] audit: type=1334 audit(1777303867.817:2884): prog-id=1257 op=LOAD [ 206.966012] audit: type=1300 audit(1777303867.817:2884): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000106490 a2=98 a3=0 items=0 ppid=5200 pid=5342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.975825] audit: type=1327 audit(1777303867.817:2884): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931376663303533306130616437306230343733663231326432306337 [ 206.982094] audit: type=1334 audit(1777303867.817:2885): prog-id=1258 op=LOAD [ 206.983699] audit: type=1300 audit(1777303867.817:2885): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000106220 a2=98 a3=0 items=0 ppid=5200 pid=5342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.990195] audit: type=1327 audit(1777303867.817:2885): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931376663303533306130616437306230343733663231326432306337 [ 210.399108] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 212.350717] kauditd_printk_skb: 5739 callbacks suppressed [ 212.350721] audit: type=1334 audit(1777303873.203:4805): prog-id=2215 op=LOAD [ 212.353670] audit: type=1300 audit(1777303873.203:4805): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe30f97590 a2=74 a3=7ffe30f97590 items=0 ppid=5578 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.359794] audit: type=1327 audit(1777303873.203:4805): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 212.364658] audit: type=1334 audit(1777303873.204:4806): prog-id=2215 op=UNLOAD [ 212.366202] audit: type=1300 audit(1777303873.204:4806): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe30f97590 a2=74 a3=7ffe30f97590 items=0 ppid=5578 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.372404] audit: type=1327 audit(1777303873.204:4806): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 212.377278] audit: type=1334 audit(1777303873.204:4807): prog-id=2216 op=LOAD [ 212.379194] audit: type=1300 audit(1777303873.204:4807): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe30f97520 a2=80 a3=0 items=0 ppid=5578 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.385352] audit: type=1327 audit(1777303873.204:4807): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 212.391259] audit: type=1334 audit(1777303873.204:4808): prog-id=2216 op=UNLOAD This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:31:16 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 This is ip-172-31-20-238 (Linux x86_64 6.12.81-flatcar) 15:31:16 SSH host key: SHA256:gaOWoOLWq56mPAuC+bERdg26YFMoNdqc5/GUrmZwdOU (ECDSA) SSH host key: SHA256:HA4fxTRJx4ILKT1EqbK+kFqlwv0LE4IyweM9aUgD1yM (RSA) SSH host key: SHA256:45uVErL0duCvPNa1b0vnpJYeCv43EVquObAaUhAi4/8 (ED25519) eth0: 172.31.20.238 fe80::4b5:7aff:fe50:e7f5 ip-172-31-20-238 login: [ 218.602828] kauditd_printk_skb: 560 callbacks suppressed [ 218.602832] audit: type=1334 audit(1777303879.455:5003): prog-id=2253 op=LOAD [ 218.606093] audit: type=1334 audit(1777303879.456:5004): prog-id=2254 op=LOAD [ 218.607758] audit: type=1300 audit(1777303879.456:5004): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe24e31400 a2=74 a3=7ffe24e31400 items=0 ppid=5447 pid=6076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 218.613993] audit: type=1327 audit(1777303879.456:5004): proctitle=74630066696C746572007265706C61636500646576006C786362653961626337333337346400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343034315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 218.618309] audit: type=1334 audit(1777303879.456:5005): prog-id=2254 op=UNLOAD [ 218.619583] audit: type=1300 audit(1777303879.456:5005): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe24e31400 a2=74 a3=7ffe24e31400 items=0 ppid=5447 pid=6076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 218.624798] audit: type=1327 audit(1777303879.456:5005): proctitle=74630066696C746572007265706C61636500646576006C786362653961626337333337346400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343034315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 218.629050] audit: type=1334 audit(1777303879.456:5006): prog-id=2255 op=LOAD [ 218.630274] audit: type=1300 audit(1777303879.456:5006): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe24e31390 a2=80 a3=0 items=0 ppid=5447 pid=6076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 218.635337] audit: type=1327 audit(1777303879.456:5006): proctitle=74630066696C746572007265706C61636500646576006C786362653961626337333337346400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343034315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572