]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. [ 14.109630] systemd[1]: Created slice system-getty.slice - Slice /system/getty. [ 14.111562] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. [ 14.113541] systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. [ 14.115628] systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. [ 14.118048] systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. [ 14.119959] systemd[1]: Created slice user.slice - User and Session Slice. [ 14.121383] systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. [ 14.123442] systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. [ 14.125642] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 14.128533] systemd[1]: Set up automount boot.automount - Boot partition Automount Point. [ 14.130274] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 14.132645] systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... [ 14.134510] systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... [ 14.135878] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 14.137485] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 14.138939] systemd[1]: Reached target imports.target - Image Downloads. [ 14.140247] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 14.141639] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 14.143025] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 14.144505] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 14.146137] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 14.147668] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 14.149023] systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. [ 14.150914] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 14.152731] systemd[1]: Reached target slices.target - Slice Units. [ 14.153969] systemd[1]: Reached target swap.target - Swaps. [ 14.155110] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 14.157861] systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. [ 14.161328] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 14.163582] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 14.166299] systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. [ 14.168593] systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. [ 14.170974] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 14.173168] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 14.175875] systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. [ 14.178740] systemd[1]: Listening on systemd-networkd-varlink-metrics.socket - Network Management Metrics Varlink Socket. [ 14.181195] systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. [ 14.183358] systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. [ 14.185782] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 14.188051] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 14.190834] systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. [ 14.194527] systemd[1]: Listening on systemd-report-basic.socket - Report System Basic Metrics Socket. [ 14.198068] systemd[1]: Listening on systemd-report-cgroup.socket - CGroup Report Varlink Socket. [ 14.200463] systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. [ 14.202598] systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. [ 14.206441] systemd[1]: Listening on systemd-storage-block.socket - Simple Block Device Backed Storage Provider. [ 14.209896] systemd[1]: Listening on systemd-storage-fs.socket - Simple File System Backed Storage Provider. [ 14.214427] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 14.216350] systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. [ 14.218614] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 14.224588] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 14.230757] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 14.235728] systemd[1]: Mounting media.mount - External Media Directory... [ 14.240723] systemd[1]: proc-xen.mount - /proc/xen skipped, unmet condition check ConditionVirtualization=xen [ 14.244223] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 14.255683] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 14.258022] systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. [ 14.263753] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 14.270707] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 14.273938] systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. [ 14.281772] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 14.290690] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 14.292851] systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm [ 14.296049] systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore [ 14.302772] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 14.304818] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf [ 14.307643] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 14.309018] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 14.311180] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 [ 14.323778] systemd[1]: Starting systemd-journald.service - Journal Service... [ 14.329958] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 14.335851] systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... [ 14.340768] systemd[1]: Reached target time-set.target - System Time Set. [ 14.347842] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 14.356870] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 14.364634] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 14.368060] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen [ 14.374090] fuse: init (API version 7.45) [ 14.383094] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 14.386040] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 14.390095] systemd[1]: Mounted media.mount - External Media Directory. [ 14.392931] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 14.397035] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 14.400470] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 14.404758] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 14.410625] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 14.415995] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 14.419884] systemd[1]: modprobe@fuse.service: Deactivated successfully. [ 14.421970] systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. [ 14.430040] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. [ 14.434518] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. [ 14.443490] systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... [ 14.446741] systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... [ 14.451194] systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ [ 14.457373] systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... [ 14.461261] systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore [ 14.466837] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... [ 14.473150] systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... [ 14.477845] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... [ 14.485301] systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. [ 14.491695] systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. [ 14.493925] systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. [ 14.496904] systemd[1]: Reached target network-pre.target - Preparation for Network. [ 14.499111] systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. [ 14.505869] systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. [ 14.514031] systemd-journald[1250]: Collecting audit messages is enabled. [ 14.523903] systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. [ 14.527837] systemd[1]: Reached target first-boot-complete.target - First Boot Complete. [ 14.531593] systemd[1]: Started systemd-journald.service - Journal Service. [ 14.601886] systemd-journald[1250]: Received client request to flush runtime journal. [ 14.823720] tun: Universal TUN/TAP device driver, 1.6 [ 15.219071] set_capacity_and_notify: 2 callbacks suppressed [ 15.219075] loop6: detected capacity change from 0 to 44505 [ 15.226580] loop6: p1 p2 p3 [ 15.251738] device-mapper: verity: sha256 using "sha256-lib" [ 15.252820] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 15.254680] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 15.257668] device-mapper: ioctl: error adding target to table [ 15.273155] device-mapper: verity: sha256 using "sha256-lib" [ 15.969967] mousedev: PS/2 mouse device common for all mice [ 15.997643] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 16.000182] vmclock AMZNC10C:00: vmclock0: registered miscdev [ 16.008703] ACPI: button: Power Button [PWRF] [ 16.012067] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 16.018641] ACPI: button: Sleep Button [SLPF] [ 16.084228] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 16.233034] kauditd_printk_skb: 97 callbacks suppressed [ 16.233037] audit: type=1130 audit(1792402005.319:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.469874] audit: type=1130 audit(1792402005.556:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.475843] audit: type=1131 audit(1792402005.556:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.497052] erofs (device dm-5): mounted with root inode @ nid 40. [ 16.531634] loop6: detected capacity change from 0 to 44505 [ 16.540615] loop6: p1 p2 p3 [ 16.546376] device-mapper: verity: sha256 using "sha256-lib" [ 16.547475] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 16.549128] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 16.550747] device-mapper: ioctl: error adding target to table [ 16.553810] device-mapper: verity: sha256 using "sha256-lib" [ 16.586991] erofs (device dm-5): mounted with root inode @ nid 40. [ 16.595387] audit: type=1130 audit(1792402005.681:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.600828] audit: type=1130 audit(1792402005.686:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.629997] loop6: detected capacity change from 0 to 221624 [ 16.672865] loop6: detected capacity change from 0 to 169080 [ 16.683128] loop6: p1 p2 p3 [ 16.694763] device-mapper: verity: sha256 using "sha256-lib" [ 16.695855] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 16.697313] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 16.698961] device-mapper: ioctl: error adding target to table [ 16.703381] device-mapper: verity: sha256 using "sha256-lib" [ 16.735032] erofs (device dm-5): mounted with root inode @ nid 39. [ 16.761006] loop6: detected capacity change from 0 to 324328 [ 16.770355] loop6: p1 p2 p3 [ 16.775004] device-mapper: verity: sha256 using "sha256-lib" [ 16.775969] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 16.777378] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 16.778853] device-mapper: ioctl: error adding target to table [ 16.780999] device-mapper: verity: sha256 using "sha256-lib" [ 16.818363] erofs (device dm-5): mounted with root inode @ nid 39. [ 16.839709] loop6: detected capacity change from 0 to 431832 [ 16.849317] loop6: p1 p2 p3 [ 16.855194] device-mapper: verity: sha256 using "sha256-lib" [ 16.856274] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 16.857658] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 16.859099] device-mapper: ioctl: error adding target to table [ 16.861366] device-mapper: verity: sha256 using "sha256-lib" [ 16.898972] erofs (device dm-5): mounted with root inode @ nid 39. [ 16.922567] loop6: detected capacity change from 0 to 221624 [ 16.942050] loop7: detected capacity change from 0 to 169080 [ 16.953403] loop7: p1 p2 p3 [ 16.960395] device-mapper: verity: sha256 using "sha256-lib" [ 16.961440] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 16.962925] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 16.964399] device-mapper: ioctl: error adding target to table [ 16.967728] device-mapper: verity: sha256 using "sha256-lib" [ 17.001181] erofs (device dm-5): mounted with root inode @ nid 39. [ 17.005163] loop8: detected capacity change from 0 to 324328 [ 17.014907] loop8: p1 p2 p3 [ 17.020470] device-mapper: verity: sha256 using "sha256-lib" [ 17.021435] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 17.022824] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 17.024089] device-mapper: ioctl: error adding target to table [ 17.026058] device-mapper: verity: sha256 using "sha256-lib" [ 17.063051] erofs (device dm-6): mounted with root inode @ nid 39. [ 17.068905] loop9: detected capacity change from 0 to 431832 [ 17.079377] loop9: p1 p2 p3 [ 17.084287] device-mapper: verity: sha256 using "sha256-lib" [ 17.085177] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 17.086503] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 17.087819] device-mapper: ioctl: error adding target to table [ 17.089723] device-mapper: verity: sha256 using "sha256-lib" [ 17.127495] erofs (device dm-7): mounted with root inode @ nid 39. [ 17.140299] audit: type=1130 audit(1792402006.226:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 17.211160] audit: type=1130 audit(1792402006.297:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 17.273194] audit: type=1127 audit(1792402006.359:150): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 17.283142] audit: type=1130 audit(1792402006.369:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 17.345985] audit: type=1130 audit(1792402006.432:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 18.398256] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 18.488968] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/10/19 09:26:50Z: Amazon SSM Agent v3.3.0.0 is running 2026/10/19 09:26:50Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/10/19 09:26:50Z: OsVersion: 9999.9.9 [!p]104\[?7h78P+q6E616D65\ This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:26:54 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 36.609726] kauditd_printk_skb: 3 callbacks suppressed [ 36.609730] audit: type=1305 audit(1792402027.028:154): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 36.612677] audit: type=1300 audit(1792402027.028:154): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffecaeb5670 a2=420 a3=0 items=0 ppid=1990 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 36.616784] audit: type=1327 audit(1792402027.028:154): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 36.619235] audit: type=1130 audit(1792402027.045:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.622348] audit: type=1131 audit(1792402027.045:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.625233] audit: type=1106 audit(1792402027.045:157): pid=1984 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 36.628465] audit: type=1104 audit(1792402027.045:158): pid=1984 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 36.778215] audit: type=1106 audit(1792402027.204:159): pid=1967 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 36.782837] audit: type=1104 audit(1792402027.204:160): pid=1967 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 36.789394] audit: type=1131 audit(1792402027.213:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.25.206:22-98.64.94.113:40970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.248837] Initializing XFRM netlink socket This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:27:11 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:27:12 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 45.965021] kauditd_printk_skb: 111 callbacks suppressed [ 45.965025] audit: type=1130 audit(1792402036.391:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.013572] audit: type=1131 audit(1792402036.439:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 49.477149] audit: type=1131 audit(1792402039.903:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.488978] audit: type=1334 audit(1792402039.915:208): prog-id=32 op=UNLOAD [ 56.607657] audit: type=1130 audit(1792402047.032:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.698431] audit: type=1131 audit(1792402047.124:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.810581] audit: type=1130 audit(1792402048.236:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.815742] audit: type=1131 audit(1792402048.236:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.994212] zram_generator::config[2534]: No configuration found. [ 58.376953] audit: type=1334 audit(1792402048.803:213): prog-id=36 op=LOAD [ 58.378234] audit: type=1334 audit(1792402048.803:214): prog-id=16 op=UNLOAD [ 58.379849] audit: type=1334 audit(1792402048.803:215): prog-id=37 op=LOAD [ 58.381286] audit: type=1334 audit(1792402048.803:216): prog-id=38 op=LOAD [ 58.382735] audit: type=1334 audit(1792402048.803:217): prog-id=17 op=UNLOAD [ 58.383977] audit: type=1334 audit(1792402048.803:218): prog-id=18 op=UNLOAD [ 65.113829] zram_generator::config[3171]: No configuration found. [ 65.629820] kauditd_printk_skb: 204 callbacks suppressed [ 65.629825] audit: type=1334 audit(1792402056.056:315): prog-id=86 op=LOAD [ 65.632476] audit: type=1334 audit(1792402056.056:316): prog-id=36 op=UNLOAD [ 65.633983] audit: type=1334 audit(1792402056.056:317): prog-id=87 op=LOAD [ 65.635395] audit: type=1334 audit(1792402056.056:318): prog-id=88 op=LOAD [ 65.636829] audit: type=1334 audit(1792402056.056:319): prog-id=37 op=UNLOAD [ 65.638165] audit: type=1334 audit(1792402056.056:320): prog-id=38 op=UNLOAD [ 65.639701] audit: type=1334 audit(1792402056.058:321): prog-id=89 op=LOAD [ 65.640999] audit: type=1334 audit(1792402056.058:322): prog-id=39 op=UNLOAD [ 65.642399] audit: type=1334 audit(1792402056.058:323): prog-id=90 op=LOAD [ 65.643753] audit: type=1334 audit(1792402056.058:324): prog-id=91 op=LOAD [ 71.129739] kauditd_printk_skb: 54 callbacks suppressed [ 71.129743] audit: type=1334 audit(1792402061.556:379): prog-id=112 op=LOAD [ 71.134348] audit: type=1334 audit(1792402061.559:380): prog-id=113 op=LOAD [ 71.135542] audit: type=1300 audit(1792402061.559:380): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=21c550531fd8 a2=98 a3=0 items=0 ppid=3360 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.142022] audit: type=1327 audit(1792402061.559:380): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036376666643130393466353431656639346339326161633364346130 [ 71.153140] audit: type=1334 audit(1792402061.559:381): prog-id=113 op=UNLOAD [ 71.155657] audit: type=1300 audit(1792402061.559:381): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3360 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.166216] audit: type=1327 audit(1792402061.559:381): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036376666643130393466353431656639346339326161633364346130 [ 71.173658] audit: type=1334 audit(1792402061.559:382): prog-id=114 op=LOAD [ 71.176279] audit: type=1300 audit(1792402061.559:382): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=21c550532290 a2=98 a3=0 items=0 ppid=3360 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.185661] audit: type=1327 audit(1792402061.559:382): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036376666643130393466353431656639346339326161633364346130 [ 84.358519] kauditd_printk_skb: 224 callbacks suppressed [ 84.358522] audit: type=1334 audit(1792402074.784:459): prog-id=130 op=LOAD [ 84.362779] audit: type=1334 audit(1792402074.789:460): prog-id=131 op=LOAD [ 84.364617] audit: type=1300 audit(1792402074.789:460): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=27bf92349fd8 a2=98 a3=0 items=0 ppid=3360 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.369800] audit: type=1327 audit(1792402074.789:460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636163343436643835333939663832373430373161346464353532 [ 84.374721] audit: type=1334 audit(1792402074.789:461): prog-id=131 op=UNLOAD [ 84.375966] audit: type=1300 audit(1792402074.789:461): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3360 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.381690] audit: type=1327 audit(1792402074.789:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636163343436643835333939663832373430373161346464353532 [ 84.387100] audit: type=1334 audit(1792402074.789:462): prog-id=132 op=LOAD [ 84.388492] audit: type=1300 audit(1792402074.789:462): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=27bf9234a290 a2=98 a3=0 items=0 ppid=3360 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.393698] audit: type=1327 audit(1792402074.789:462): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530636163343436643835333939663832373430373161346464353532 [ 89.763602] kauditd_printk_skb: 122 callbacks suppressed [ 89.763605] audit: type=1334 audit(1792402080.189:511): prog-id=158 op=LOAD [ 89.765889] audit: type=1300 audit(1792402080.189:511): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc09c50ad0 a2=74 a3=7ffc09c50ad0 items=0 ppid=3890 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 89.771743] audit: type=1327 audit(1792402080.189:511): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 89.773740] audit: type=1334 audit(1792402080.189:512): prog-id=158 op=UNLOAD [ 89.775016] audit: type=1300 audit(1792402080.189:512): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffc09c50ad0 a2=74 a3=7ffc09c50ad0 items=0 ppid=3890 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 89.780766] audit: type=1327 audit(1792402080.189:512): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 89.782863] audit: type=1334 audit(1792402080.189:513): prog-id=159 op=LOAD [ 89.784439] audit: type=1300 audit(1792402080.189:513): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc09c4fb50 a2=90 a3=2 items=0 ppid=3890 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 89.790495] audit: type=1327 audit(1792402080.189:513): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 89.792694] audit: type=1334 audit(1792402080.191:514): prog-id=159 op=UNLOAD This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:03 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 93.569671] NET: Registered PF_ALG protocol family This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:04 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 95.018828] eth0: renamed from tmp8b7cd [ 95.020873] eth0: renamed from tmpd3db5 This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:05 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 95.684665] kauditd_printk_skb: 6758 callbacks suppressed [ 95.684669] audit: type=1334 audit(1792402086.110:2767): prog-id=1264 op=LOAD [ 95.687816] audit: type=1300 audit(1792402086.110:2767): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd21f16da0 a2=74 a3=7ffd21f16da0 items=0 ppid=3890 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.696646] audit: type=1327 audit(1792402086.110:2767): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003132365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 95.702481] audit: type=1334 audit(1792402086.110:2768): prog-id=1264 op=UNLOAD [ 95.703803] audit: type=1300 audit(1792402086.110:2768): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd21f16da0 a2=74 a3=7ffd21f16da0 items=0 ppid=3890 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.709791] audit: type=1327 audit(1792402086.110:2768): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003132365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 95.714069] audit: type=1334 audit(1792402086.110:2769): prog-id=1265 op=LOAD [ 95.715596] audit: type=1300 audit(1792402086.110:2769): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd21f16d30 a2=80 a3=0 items=0 ppid=3890 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.721245] audit: type=1327 audit(1792402086.110:2769): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003132365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 95.725784] audit: type=1334 audit(1792402086.110:2770): prog-id=1265 op=UNLOAD This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:06 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:07 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:28:08 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 101.219878] kauditd_printk_skb: 579 callbacks suppressed [ 101.219881] audit: type=1325 audit(1792402091.646:2966): table=filter:148 family=2 entries=11 op=nft_register_rule pid=4552 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.223668] audit: type=1300 audit(1792402091.646:2966): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe07b281f0 a2=0 a3=7ffe07b281dc items=0 ppid=3438 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.229580] audit: type=1327 audit(1792402091.646:2966): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 101.236823] audit: type=1325 audit(1792402091.662:2967): table=nat:149 family=2 entries=45 op=nft_register_chain pid=4552 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.239603] audit: type=1300 audit(1792402091.662:2967): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffe07b281f0 a2=0 a3=7ffe07b281dc items=0 ppid=3438 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.245135] audit: type=1327 audit(1792402091.662:2967): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 126.865485] audit: type=1130 audit(1792402117.291:2968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.25.206:22-98.64.94.113:45696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 127.740070] audit: type=1101 audit(1792402118.166:2969): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 127.745503] audit: type=1103 audit(1792402118.168:2970): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 127.750826] audit: type=1006 audit(1792402118.168:2971): pid=4561 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 127.753584] audit: type=1300 audit(1792402118.168:2971): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcda82cb90 a2=3 a3=0 items=0 ppid=1 pid=4561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.759938] audit: type=1327 audit(1792402118.168:2971): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 127.767502] audit: type=1105 audit(1792402118.193:2972): pid=4561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 127.773532] audit: type=1103 audit(1792402118.197:2973): pid=4565 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 128.891360] audit: type=1106 audit(1792402119.317:2974): pid=4561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 128.897520] audit: type=1104 audit(1792402119.317:2975): pid=4561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 134.053094] kauditd_printk_skb: 1 callbacks suppressed [ 134.053098] audit: type=1130 audit(1792402124.478:2977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-172.31.25.206:22-98.64.94.113:38418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.887110] audit: type=1101 audit(1792402125.313:2978): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 134.893009] audit: type=1103 audit(1792402125.315:2979): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 134.898528] audit: type=1006 audit(1792402125.315:2980): pid=4581 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 134.901579] audit: type=1300 audit(1792402125.315:2980): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcad587b60 a2=3 a3=0 items=0 ppid=1 pid=4581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.907950] audit: type=1327 audit(1792402125.315:2980): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 134.914552] audit: type=1105 audit(1792402125.340:2981): pid=4581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 134.921266] audit: type=1103 audit(1792402125.347:2982): pid=4585 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 135.445404] audit: type=1106 audit(1792402125.871:2983): pid=4581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 135.452558] audit: type=1104 audit(1792402125.871:2984): pid=4581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 140.606403] kauditd_printk_skb: 1 callbacks suppressed [ 140.606407] audit: type=1130 audit(1792402131.031:2986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.25.206:22-98.64.94.113:39854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.424792] audit: type=1101 audit(1792402131.851:2987): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.430743] audit: type=1103 audit(1792402131.853:2988): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.436159] audit: type=1006 audit(1792402131.853:2989): pid=4597 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 141.439594] audit: type=1300 audit(1792402131.853:2989): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcc8dcbb80 a2=3 a3=0 items=0 ppid=1 pid=4597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.444821] audit: type=1327 audit(1792402131.853:2989): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 141.457737] audit: type=1105 audit(1792402131.884:2990): pid=4597 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.463737] audit: type=1103 audit(1792402131.887:2991): pid=4601 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.976497] audit: type=1106 audit(1792402132.402:2992): pid=4597 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 141.983187] audit: type=1104 audit(1792402132.402:2993): pid=4597 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 147.142508] kauditd_printk_skb: 1 callbacks suppressed [ 147.142512] audit: type=1130 audit(1792402137.568:2995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.25.206:22-98.64.94.113:39864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.967390] audit: type=1101 audit(1792402138.393:2996): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 147.974645] audit: type=1103 audit(1792402138.400:2997): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 147.979939] audit: type=1006 audit(1792402138.400:2998): pid=4614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 147.983193] audit: type=1300 audit(1792402138.400:2998): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd6da5b770 a2=3 a3=0 items=0 ppid=1 pid=4614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.989313] audit: type=1327 audit(1792402138.400:2998): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 148.000250] audit: type=1105 audit(1792402138.426:2999): pid=4614 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.008391] audit: type=1103 audit(1792402138.434:3000): pid=4618 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.512408] audit: type=1106 audit(1792402138.938:3001): pid=4614 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 148.518960] audit: type=1104 audit(1792402138.938:3002): pid=4614 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 156.814114] kauditd_printk_skb: 23 callbacks suppressed [ 156.814118] audit: type=1130 audit(1792402147.240:3022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-9-172.31.25.206:22-98.64.94.113:46126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.630083] audit: type=1101 audit(1792402148.056:3023): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 157.635770] audit: type=1103 audit(1792402148.058:3024): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 157.641140] audit: type=1006 audit(1792402148.058:3025): pid=4662 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 157.644278] audit: type=1300 audit(1792402148.058:3025): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1eea7200 a2=3 a3=0 items=0 ppid=1 pid=4662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.650136] audit: type=1327 audit(1792402148.058:3025): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 157.657006] audit: type=1105 audit(1792402148.083:3026): pid=4662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 157.664126] audit: type=1103 audit(1792402148.090:3027): pid=4666 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 158.177350] audit: type=1106 audit(1792402148.602:3028): pid=4662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 158.185198] audit: type=1104 audit(1792402148.602:3029): pid=4662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.500462] kauditd_printk_skb: 20 callbacks suppressed [ 162.500466] audit: type=1325 audit(1792402152.926:3046): table=filter:150 family=2 entries=20 op=nft_register_rule pid=4708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.506422] audit: type=1300 audit(1792402152.926:3046): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe566e1b30 a2=0 a3=7ffe566e1b1c items=0 ppid=3438 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.522627] audit: type=1327 audit(1792402152.926:3046): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 162.525513] audit: type=1325 audit(1792402152.943:3047): table=nat:151 family=2 entries=18 op=nft_register_rule pid=4708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.529273] audit: type=1300 audit(1792402152.943:3047): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffe566e1b30 a2=0 a3=0 items=0 ppid=3438 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.535574] audit: type=1327 audit(1792402152.943:3047): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 162.700052] audit: type=1106 audit(1792402153.126:3048): pid=4692 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.707931] audit: type=1104 audit(1792402153.126:3049): pid=4692 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.714983] audit: type=1131 audit(1792402153.128:3050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4103-172.31.25.206:22-98.64.94.113:60662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.860438] audit: type=1130 audit(1792402153.286:3051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10-172.31.25.206:22-98.64.94.113:60670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.377134] kauditd_printk_skb: 27 callbacks suppressed [ 169.377137] audit: type=1325 audit(1792402159.803:3071): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4744 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 169.381795] audit: type=1300 audit(1792402159.803:3071): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd54835630 a2=0 a3=7ffd5483561c items=0 ppid=3438 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.387528] audit: type=1327 audit(1792402159.803:3071): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 169.393190] audit: type=1325 audit(1792402159.819:3072): table=nat:155 family=2 entries=102 op=nft_register_chain pid=4744 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 169.396020] audit: type=1300 audit(1792402159.819:3072): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd54835630 a2=0 a3=7ffd5483561c items=0 ppid=3438 pid=4744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.401693] audit: type=1327 audit(1792402159.819:3072): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.095181] audit: type=1130 audit(1792402161.520:3073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4104-172.31.25.206:22-98.64.94.113:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.908973] audit: type=1101 audit(1792402162.335:3074): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.914965] audit: type=1103 audit(1792402162.337:3075): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.920374] audit: type=1006 audit(1792402162.337:3076): pid=4746 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 177.614984] kauditd_printk_skb: 7 callbacks suppressed [ 177.614987] audit: type=1130 audit(1792402168.041:3082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-12-172.31.25.206:22-98.64.94.113:60616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.449169] audit: type=1101 audit(1792402168.875:3083): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.455001] audit: type=1103 audit(1792402168.877:3084): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.460850] audit: type=1006 audit(1792402168.877:3085): pid=4762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 178.464037] audit: type=1300 audit(1792402168.877:3085): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf6802390 a2=3 a3=0 items=0 ppid=1 pid=4762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.469670] audit: type=1327 audit(1792402168.877:3085): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 178.475153] audit: type=1105 audit(1792402168.901:3086): pid=4762 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.481998] audit: type=1103 audit(1792402168.908:3087): pid=4766 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 179.006528] audit: type=1106 audit(1792402169.431:3088): pid=4762 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 179.013495] audit: type=1104 audit(1792402169.431:3089): pid=4762 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 182.676846] kauditd_printk_skb: 9 callbacks suppressed [ 182.676849] audit: type=1334 audit(1792402173.103:3097): prog-id=143 op=UNLOAD [ 182.682620] audit: type=1334 audit(1792402173.103:3098): prog-id=147 op=UNLOAD [ 182.764992] audit: type=1334 audit(1792402173.191:3099): prog-id=1349 op=UNLOAD [ 182.764998] audit: type=1334 audit(1792402173.191:3100): prog-id=1365 op=UNLOAD [ 182.844820] audit: type=1334 audit(1792402173.271:3101): prog-id=125 op=UNLOAD [ 182.846377] audit: type=1334 audit(1792402173.271:3102): prog-id=129 op=UNLOAD [ 182.881821] audit: type=1334 audit(1792402173.308:3103): prog-id=112 op=UNLOAD [ 182.883532] audit: type=1334 audit(1792402173.308:3104): prog-id=116 op=UNLOAD This is ip-172-31-25-206 (Linux x86_64 6.18.45-flatcar) 09:29:34 SSH host key: SHA256:VsvmOYcF6HRO0qGR6+V6ol0zsS/QO25z/PHz/ioDYWo (ECDSA) SSH host key: SHA256:elL7TgdFKJuMHmQC3SgyzTa9K21g3egIGgbN4yjOnIk (ED25519) SSH host key: SHA256:sgLnpb45IPDz6JsjqYV1hg7AGkyGumqQ5kYw/OwlKtw (MLDSA44-ED25519) SSH host key: SHA256:ozvAUifRB6+JuK981A34HEClHeS0qRv+Gy8uKWkRzRM (RSA) eth0: 172.31.25.206 fe80::4ff:d7ff:fe90:594f%eth0 ip-172-31-25-206 login: [ 184.678199] audit: type=1106 audit(1792402175.104:3105): pid=4778 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 184.684083] audit: type=1104 audit(1792402175.104:3106): pid=4778 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success'