tem/coreos-metadata-sshkeys. Starting coreos-metadata-sshkeys@c…latcar Metadata Agent (SSH Keys)... [ OK ] Started systemd-hostnamed.service - Hostname Service. Starting polkit.service - Authorization Manager... [ OK ] Finished coreos-metadata-sshkeys@c… Flatcar Metadata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started polkit.service - Authorization Manager. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sessions.service - Permit User Sessions... [ OK ] Finished systemd-user-sessions.service - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0.service - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Started containerd.service - containerd container runtime. 2026/09/01 22:12:58Z: Amazon SSM Agent v3.3.0.0 is running 2026/09/01 22:12:58Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/09/01 22:12:58Z: OsVersion: 9999.9.9 [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104\[?7hP+q6E616D65\ This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:13:00 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 48.710258] kauditd_printk_skb: 70 callbacks suppressed [ 48.710264] audit: type=1305 audit(1788300790.666:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 48.715203] audit: type=1300 audit(1788300790.666:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffefe3fa40 a2=420 a3=0 items=0 ppid=2685 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.722986] audit: type=1327 audit(1788300790.666:163): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 48.725833] audit: type=1106 audit(1788300790.683:164): pid=2679 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 48.730520] audit: type=1104 audit(1788300790.684:165): pid=2679 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 48.734991] audit: type=1130 audit(1788300790.685:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.739358] audit: type=1131 audit(1788300790.685:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.882044] audit: type=1106 audit(1788300790.845:168): pid=2674 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 48.890441] audit: type=1104 audit(1788300790.846:169): pid=2674 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 48.896403] audit: type=1131 audit(1788300790.851:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4101-172.31.28.217:22-20.61.25.254:58080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.679485] kauditd_printk_skb: 13 callbacks suppressed [ 56.679491] audit: type=1325 audit(1788300798.643:182): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 56.683874] audit: type=1300 audit(1788300798.643:182): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffde522760 a2=0 a3=0 items=0 ppid=2752 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.690432] audit: type=1327 audit(1788300798.643:182): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 56.693997] audit: type=1325 audit(1788300798.649:183): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 56.697389] audit: type=1300 audit(1788300798.649:183): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffef117c40 a2=0 a3=0 items=0 ppid=2752 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.704114] audit: type=1327 audit(1788300798.649:183): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 56.707662] audit: type=1325 audit(1788300798.653:184): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 56.710919] audit: type=1300 audit(1788300798.653:184): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa419390 a2=0 a3=0 items=0 ppid=2752 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.716869] audit: type=1327 audit(1788300798.653:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 56.719875] audit: type=1325 audit(1788300798.658:185): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 56.931887] Initializing XFRM netlink socket This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:13:19 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:13:20 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 63.452137] kauditd_printk_skb: 92 callbacks suppressed [ 63.453229] audit: type=1131 audit(1788300805.415:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.471277] audit: type=1334 audit(1788300805.435:219): prog-id=32 op=UNLOAD [ 70.507190] audit: type=1130 audit(1788300812.470:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.628182] audit: type=1131 audit(1788300812.590:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 81.198830] audit: type=1130 audit(1788300823.162:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 81.297491] audit: type=1131 audit(1788300823.261:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 82.338792] audit: type=1130 audit(1788300824.301:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 82.343096] audit: type=1131 audit(1788300824.301:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 82.657425] zram_generator::config[3540]: No configuration found. [ 83.280520] audit: type=1334 audit(1788300825.244:226): prog-id=36 op=LOAD [ 83.281912] audit: type=1334 audit(1788300825.244:227): prog-id=13 op=UNLOAD [ 83.283697] audit: type=1334 audit(1788300825.245:228): prog-id=37 op=LOAD [ 83.285280] audit: type=1334 audit(1788300825.247:229): prog-id=38 op=LOAD [ 83.286842] audit: type=1334 audit(1788300825.247:230): prog-id=14 op=UNLOAD [ 83.288419] audit: type=1334 audit(1788300825.247:231): prog-id=15 op=UNLOAD [ 87.008833] kauditd_printk_skb: 72 callbacks suppressed [ 87.008839] audit: type=1334 audit(1788300828.972:280): prog-id=56 op=LOAD [ 87.013994] audit: type=1334 audit(1788300828.974:281): prog-id=57 op=LOAD [ 87.015776] audit: type=1300 audit(1788300828.974:281): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=652cfed31f90 a2=98 a3=0 items=0 ppid=3651 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.023185] audit: type=1327 audit(1788300828.974:281): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462636232393564643635313162346331653131356263646538373565 [ 87.029288] audit: type=1334 audit(1788300828.979:282): prog-id=57 op=UNLOAD [ 87.033213] audit: type=1300 audit(1788300828.979:282): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3651 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.043578] audit: type=1327 audit(1788300828.979:282): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462636232393564643635313162346331653131356263646538373565 [ 87.049850] audit: type=1334 audit(1788300828.979:283): prog-id=58 op=LOAD [ 87.051556] audit: type=1300 audit(1788300828.979:283): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=652cfed32268 a2=98 a3=0 items=0 ppid=3651 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.057323] audit: type=1327 audit(1788300828.979:283): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462636232393564643635313162346331653131356263646538373565 [ 92.900946] zram_generator::config[3932]: No configuration found. [ 93.631676] kauditd_printk_skb: 122 callbacks suppressed [ 93.631682] audit: type=1334 audit(1788300835.595:328): prog-id=86 op=LOAD [ 93.635178] audit: type=1334 audit(1788300835.596:329): prog-id=36 op=UNLOAD [ 93.638176] audit: type=1334 audit(1788300835.598:330): prog-id=87 op=LOAD [ 93.639544] audit: type=1334 audit(1788300835.598:331): prog-id=88 op=LOAD [ 93.640946] audit: type=1334 audit(1788300835.598:332): prog-id=37 op=UNLOAD [ 93.642367] audit: type=1334 audit(1788300835.598:333): prog-id=38 op=UNLOAD [ 93.646185] audit: type=1334 audit(1788300835.608:334): prog-id=89 op=LOAD [ 93.647552] audit: type=1334 audit(1788300835.608:335): prog-id=39 op=UNLOAD [ 93.648984] audit: type=1334 audit(1788300835.608:336): prog-id=90 op=LOAD [ 93.650394] audit: type=1334 audit(1788300835.609:337): prog-id=91 op=LOAD [ 98.907125] kauditd_printk_skb: 49 callbacks suppressed [ 98.908966] audit: type=1106 audit(1788300840.870:387): pid=2733 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 98.913837] audit: type=1104 audit(1788300840.872:388): pid=2733 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 99.068935] audit: type=1106 audit(1788300841.032:389): pid=2714 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 99.089531] audit: type=1104 audit(1788300841.032:390): pid=2714 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 99.103372] audit: type=1131 audit(1788300841.044:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4102-172.31.28.217:22-20.61.25.254:58084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 100.177478] audit: type=1334 audit(1788300842.141:392): prog-id=112 op=LOAD [ 100.180044] audit: type=1334 audit(1788300842.142:393): prog-id=113 op=LOAD [ 100.183748] audit: type=1300 audit(1788300842.142:393): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5c24db50df90 a2=98 a3=0 items=0 ppid=4084 pid=4096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.192537] audit: type=1327 audit(1788300842.142:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164613434393965633838666165366335383732346661623137613764 [ 100.201188] audit: type=1334 audit(1788300842.142:394): prog-id=113 op=UNLOAD [ 108.774689] kauditd_printk_skb: 229 callbacks suppressed [ 108.774694] audit: type=1334 audit(1788300850.738:472): prog-id=130 op=LOAD [ 108.777477] audit: type=1334 audit(1788300850.739:473): prog-id=131 op=LOAD [ 108.778882] audit: type=1300 audit(1788300850.739:473): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b87415b1f90 a2=98 a3=0 items=0 ppid=4133 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.784807] audit: type=1327 audit(1788300850.739:473): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653865383939333232626432326130366139303935653065383639 [ 108.791831] audit: type=1334 audit(1788300850.741:474): prog-id=131 op=UNLOAD [ 108.795460] audit: type=1300 audit(1788300850.741:474): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4133 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.802519] audit: type=1327 audit(1788300850.741:474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653865383939333232626432326130366139303935653065383639 [ 108.808009] audit: type=1334 audit(1788300850.741:475): prog-id=132 op=LOAD [ 108.809685] audit: type=1300 audit(1788300850.741:475): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b87415b2268 a2=98 a3=0 items=0 ppid=4133 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.815605] audit: type=1327 audit(1788300850.741:475): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537653865383939333232626432326130366139303935653065383639 [ 113.782555] kauditd_printk_skb: 100 callbacks suppressed [ 113.782560] audit: type=1334 audit(1788300855.746:516): prog-id=153 op=LOAD [ 113.785818] audit: type=1334 audit(1788300855.749:517): prog-id=154 op=LOAD [ 113.787775] audit: type=1300 audit(1788300855.749:517): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=50089bc15f90 a2=98 a3=0 items=0 ppid=4133 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.794380] audit: type=1327 audit(1788300855.749:517): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653739656637353361313334663663643665643738656530316434 [ 113.800461] audit: type=1334 audit(1788300855.749:518): prog-id=154 op=UNLOAD [ 113.802102] audit: type=1300 audit(1788300855.749:518): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4133 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.809110] audit: type=1327 audit(1788300855.749:518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653739656637353361313334663663643665643738656530316434 [ 113.815106] audit: type=1334 audit(1788300855.749:519): prog-id=155 op=LOAD [ 113.817087] audit: type=1300 audit(1788300855.749:519): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=50089bc16268 a2=98 a3=0 items=0 ppid=4133 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.823378] audit: type=1327 audit(1788300855.749:519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653739656637353361313334663663643665643738656530316434 [ 118.314285] NET: Registered PF_ALG protocol family This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:14:20 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 119.178296] kauditd_printk_skb: 6636 callbacks suppressed [ 119.178301] audit: type=1325 audit(1788300861.142:2732): table=nat:98 family=2 entries=1 op=nft_register_chain pid=4956 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 119.182725] audit: type=1300 audit(1788300861.142:2732): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffc5b76cb0 a2=0 a3=ffffbd8cf5c0 items=0 ppid=4627 pid=4956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.189187] audit: type=1327 audit(1788300861.142:2732): proctitle=69707461626C6573002D770035002D74006E6174002D53 [ 119.191395] audit: type=1325 audit(1788300861.148:2733): table=nat:99 family=10 entries=1 op=nft_register_chain pid=4957 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 119.195668] audit: type=1300 audit(1788300861.148:2733): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=fffffdd44b00 a2=0 a3=ffff84c055c0 items=0 ppid=4627 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.201992] audit: type=1327 audit(1788300861.148:2733): proctitle=6970367461626C6573002D770035002D74006E6174002D53 [ 119.204432] audit: type=1325 audit(1788300861.153:2734): table=mangle:100 family=2 entries=5 op=nft_register_chain pid=4958 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 119.207753] audit: type=1300 audit(1788300861.153:2734): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe9703a80 a2=0 a3=ffffb67dd5c0 items=0 ppid=4627 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.216237] audit: type=1327 audit(1788300861.153:2734): proctitle=69707461626C6573002D770035002D74006D616E676C65002D53 [ 119.221211] audit: type=1325 audit(1788300861.156:2735): table=mangle:101 family=10 entries=5 op=nft_register_chain pid=4959 subj=system_u:system_r:spc_t:s0 comm="ip6tables" This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:14:21 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 120.063022] eth0: renamed from tmp3ba18 [ 120.169067] eth0: renamed from tmp20110 This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:14:22 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:14:23 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:14:24 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 128.051209] kauditd_printk_skb: 251 callbacks suppressed [ 128.051215] audit: type=1334 audit(1788300870.014:2819): prog-id=1288 op=LOAD [ 128.054838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.055375] audit: type=1334 audit(1788300870.015:2820): prog-id=1289 op=LOAD [ 128.056028] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 128.057881] audit: type=1300 audit(1788300870.015:2820): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc73a0538 a2=74 a3=11 items=0 ppid=4627 pid=5117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 128.058689] audit: backlog limit exceeded [ 128.065619] audit: type=1327 audit(1788300870.015:2820): proctitle=74630066696C746572007265706C61636500646576006C786336323634363665393562663300696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 128.070906] audit: type=1334 audit(1788300870.016:2821): prog-id=1289 op=UNLOAD [ 128.072980] audit: type=1300 audit(1788300870.016:2821): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffaa2d8f50 a2=74 a3=11 items=0 ppid=4627 pid=5117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 128.079176] audit: type=1327 audit(1788300870.016:2821): proctitle=74630066696C746572007265706C61636500646576006C786336323634363665393562663300696E6772657373007072696F00310068616E646C65003100627066006461006F626A003632395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 163.474919] kauditd_printk_skb: 468 callbacks suppressed [ 163.474925] audit: type=1130 audit(1788300905.438:2980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-2-172.31.28.217:22-20.61.25.254:50258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.416853] audit: type=1101 audit(1788300906.379:2981): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.426036] audit: type=1103 audit(1788300906.387:2982): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.432754] audit: type=1006 audit(1788300906.387:2983): pid=5295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 164.436367] audit: type=1300 audit(1788300906.387:2983): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcb0a85e0 a2=3 a3=0 items=0 ppid=1 pid=5295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.442082] audit: type=1327 audit(1788300906.387:2983): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.460079] audit: type=1105 audit(1788300906.423:2984): pid=5295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.467682] audit: type=1103 audit(1788300906.431:2985): pid=5299 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 165.048691] audit: type=1106 audit(1788300907.012:2986): pid=5295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 165.059544] audit: type=1104 audit(1788300907.012:2987): pid=5295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 170.213072] kauditd_printk_skb: 1 callbacks suppressed [ 170.213078] audit: type=1130 audit(1788300912.175:2989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-3-172.31.28.217:22-20.61.25.254:40126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.082104] audit: type=1101 audit(1788300913.045:2990): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.091213] audit: type=1103 audit(1788300913.054:2991): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.096962] audit: type=1006 audit(1788300913.054:2992): pid=5312 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 171.100802] audit: type=1300 audit(1788300913.054:2992): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe748fb60 a2=3 a3=0 items=0 ppid=1 pid=5312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.107743] audit: type=1327 audit(1788300913.054:2992): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.132075] audit: type=1105 audit(1788300913.095:2993): pid=5312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.139371] audit: type=1103 audit(1788300913.101:2994): pid=5316 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.676595] audit: type=1106 audit(1788300913.640:2995): pid=5312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 171.684505] audit: type=1104 audit(1788300913.640:2996): pid=5312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 176.843917] kauditd_printk_skb: 1 callbacks suppressed [ 176.843923] audit: type=1130 audit(1788300918.807:2998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4103-172.31.28.217:22-20.61.25.254:55468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.707496] audit: type=1101 audit(1788300919.671:2999): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 177.714551] audit: type=1103 audit(1788300919.677:3000): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 177.720004] audit: type=1006 audit(1788300919.677:3001): pid=5329 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 177.723200] audit: type=1300 audit(1788300919.677:3001): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffef3fd2b0 a2=3 a3=0 items=0 ppid=1 pid=5329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.729273] audit: type=1327 audit(1788300919.677:3001): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.750007] audit: type=1105 audit(1788300919.713:3002): pid=5329 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 177.762328] audit: type=1103 audit(1788300919.725:3003): pid=5333 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 178.307753] audit: type=1106 audit(1788300920.271:3004): pid=5329 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 178.315314] audit: type=1104 audit(1788300920.271:3005): pid=5329 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 183.474266] kauditd_printk_skb: 1 callbacks suppressed [ 183.474271] audit: type=1130 audit(1788300925.437:3007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4104-172.31.28.217:22-20.61.25.254:55484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.330635] audit: type=1101 audit(1788300926.294:3008): pid=5347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.337889] audit: type=1103 audit(1788300926.301:3009): pid=5347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.344184] audit: type=1006 audit(1788300926.301:3010): pid=5347 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 184.347475] audit: type=1300 audit(1788300926.301:3010): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd3bbc1a0 a2=3 a3=0 items=0 ppid=1 pid=5347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.353569] audit: type=1327 audit(1788300926.301:3010): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.379854] audit: type=1105 audit(1788300926.343:3011): pid=5347 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.386839] audit: type=1103 audit(1788300926.349:3012): pid=5351 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.931300] audit: type=1106 audit(1788300926.894:3013): pid=5347 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.937947] audit: type=1104 audit(1788300926.894:3014): pid=5347 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.427949] kauditd_printk_skb: 23 callbacks suppressed [ 193.427954] audit: type=1130 audit(1788300935.391:3034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4105-172.31.28.217:22-20.61.25.254:53704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.285947] audit: type=1101 audit(1788300936.249:3035): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.293590] audit: type=1103 audit(1788300936.255:3036): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.299914] audit: type=1006 audit(1788300936.255:3037): pid=5395 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 194.303468] audit: type=1300 audit(1788300936.255:3037): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdd5ed500 a2=3 a3=0 items=0 ppid=1 pid=5395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.309973] audit: type=1327 audit(1788300936.255:3037): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 194.332726] audit: type=1105 audit(1788300936.295:3038): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.340350] audit: type=1103 audit(1788300936.300:3039): pid=5399 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.897018] audit: type=1106 audit(1788300936.860:3040): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.905268] audit: type=1104 audit(1788300936.860:3041): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.068548] kauditd_printk_skb: 1 callbacks suppressed [ 200.068554] audit: type=1130 audit(1788300942.031:3043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-6-172.31.28.217:22-20.61.25.254:37852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.927590] audit: type=1101 audit(1788300942.891:3044): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.934859] audit: type=1103 audit(1788300942.898:3045): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.941323] audit: type=1006 audit(1788300942.898:3046): pid=5412 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 200.945189] audit: type=1300 audit(1788300942.898:3046): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdad68130 a2=3 a3=0 items=0 ppid=1 pid=5412 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.951379] audit: type=1327 audit(1788300942.898:3046): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.975122] audit: type=1105 audit(1788300942.938:3047): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.982768] audit: type=1103 audit(1788300942.946:3048): pid=5416 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 201.533388] audit: type=1106 audit(1788300943.497:3049): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 201.542826] audit: type=1104 audit(1788300943.497:3050): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 205.574061] kauditd_printk_skb: 20 callbacks suppressed [ 205.574067] audit: type=1325 audit(1788300947.536:3067): table=filter:150 family=2 entries=20 op=nft_register_rule pid=5469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 205.579890] audit: type=1300 audit(1788300947.536:3067): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe6b28ea0 a2=0 a3=1 items=0 ppid=4219 pid=5469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.587063] audit: type=1327 audit(1788300947.536:3067): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 205.591706] audit: type=1325 audit(1788300947.554:3068): table=nat:151 family=2 entries=18 op=nft_register_rule pid=5469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 205.597037] audit: type=1300 audit(1788300947.554:3068): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffe6b28ea0 a2=0 a3=1 items=0 ppid=4219 pid=5469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.609887] audit: type=1327 audit(1788300947.554:3068): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 205.767930] audit: type=1106 audit(1788300947.731:3069): pid=5442 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 205.775897] audit: type=1104 audit(1788300947.731:3070): pid=5442 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 205.783749] audit: type=1131 audit(1788300947.736:3071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4107-172.31.28.217:22-20.61.25.254:37858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.936086] audit: type=1130 audit(1788300947.899:3072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4108-172.31.28.217:22-20.61.25.254:39014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.531969] kauditd_printk_skb: 27 callbacks suppressed [ 213.531975] audit: type=1325 audit(1788300955.495:3092): table=filter:154 family=2 entries=20 op=nft_register_rule pid=5504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 213.536344] audit: type=1300 audit(1788300955.495:3092): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc49851f0 a2=0 a3=1 items=0 ppid=4219 pid=5504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.542416] audit: type=1327 audit(1788300955.495:3092): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 213.545056] audit: type=1325 audit(1788300955.504:3093): table=nat:155 family=2 entries=102 op=nft_register_chain pid=5504 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 213.548362] audit: type=1300 audit(1788300955.504:3093): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffc49851f0 a2=0 a3=1 items=0 ppid=4219 pid=5504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.554460] audit: type=1327 audit(1788300955.504:3093): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 214.498189] audit: type=1130 audit(1788300956.459:3094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-7-172.31.28.217:22-20.61.25.254:58498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.367805] audit: type=1101 audit(1788300957.331:3095): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 215.375303] audit: type=1103 audit(1788300957.338:3096): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 215.381743] audit: type=1006 audit(1788300957.339:3097): pid=5508 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 221.144938] kauditd_printk_skb: 7 callbacks suppressed [ 221.144944] audit: type=1130 audit(1788300963.108:3103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-8-172.31.28.217:22-20.61.25.254:58504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.006843] audit: type=1101 audit(1788300963.970:3104): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.013765] audit: type=1103 audit(1788300963.976:3105): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.019251] audit: type=1006 audit(1788300963.977:3106): pid=5527 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 222.022453] audit: type=1300 audit(1788300963.977:3106): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff4c5d8c0 a2=3 a3=0 items=0 ppid=1 pid=5527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.028342] audit: type=1327 audit(1788300963.977:3106): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 222.052215] audit: type=1105 audit(1788300964.015:3107): pid=5527 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.059291] audit: type=1103 audit(1788300964.022:3108): pid=5531 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.594120] audit: type=1106 audit(1788300964.557:3109): pid=5527 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.601004] audit: type=1104 audit(1788300964.557:3110): pid=5527 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 227.389799] kauditd_printk_skb: 9 callbacks suppressed [ 227.389805] audit: type=1334 audit(1788300969.353:3118): prog-id=140 op=UNLOAD [ 227.394421] audit: type=1334 audit(1788300969.353:3119): prog-id=144 op=UNLOAD [ 227.476519] audit: type=1334 audit(1788300969.440:3120): prog-id=1349 op=UNLOAD [ 227.478899] audit: type=1334 audit(1788300969.440:3121): prog-id=1375 op=UNLOAD [ 227.606535] audit: type=1334 audit(1788300969.570:3122): prog-id=117 op=UNLOAD [ 227.609225] audit: type=1334 audit(1788300969.572:3123): prog-id=121 op=UNLOAD [ 227.643542] audit: type=1334 audit(1788300969.607:3124): prog-id=122 op=UNLOAD [ 227.645297] audit: type=1334 audit(1788300969.607:3125): prog-id=126 op=UNLOAD This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:16:10 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 229.363722] audit: type=1106 audit(1788300971.327:3126): pid=5544 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 229.371474] audit: type=1104 audit(1788300971.327:3127): pid=5544 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 233.354607] kauditd_printk_skb: 9 callbacks suppressed [ 233.354613] audit: type=1106 audit(1788300975.318:3135): pid=5691 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 233.363790] audit: type=1104 audit(1788300975.318:3136): pid=5691 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 233.369884] audit: type=1131 audit(1788300975.324:3137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4110-172.31.28.217:22-20.61.25.254:47916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.529181] audit: type=1130 audit(1788300975.492:3138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4111-172.31.28.217:22-20.61.25.254:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.712833] audit: type=1334 audit(1788300975.676:3139): prog-id=1386 op=LOAD [ 233.715603] audit: type=1334 audit(1788300975.679:3140): prog-id=1387 op=LOAD [ 233.717786] audit: type=1300 audit(1788300975.679:3140): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e49dfd77f90 a2=98 a3=0 items=0 ppid=5723 pid=5734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.724652] audit: type=1327 audit(1788300975.679:3140): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138306666376133373739646530356233363131383230343765613438 [ 233.730973] audit: type=1334 audit(1788300975.679:3141): prog-id=1387 op=UNLOAD [ 233.734281] audit: type=1300 audit(1788300975.679:3141): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5723 pid=5734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.355404] kauditd_printk_skb: 3529 callbacks suppressed [ 238.355411] audit: type=1300 audit(1788300980.318:4333): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc9f884d8 a2=90 a3=2 items=0 ppid=5956 pid=6011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 238.362840] audit: type=1327 audit(1788300980.318:4333): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 238.365336] audit: type=1334 audit(1788300980.318:4334): prog-id=1978 op=UNLOAD [ 238.367419] audit: type=1300 audit(1788300980.318:4334): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffa4665f10 a2=0 a3=2 items=0 ppid=5956 pid=6011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 238.373749] audit: type=1327 audit(1788300980.318:4334): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 238.376639] audit: type=1334 audit(1788300980.319:4335): prog-id=1979 op=LOAD [ 238.378409] audit: type=1300 audit(1788300980.319:4335): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc9f884d8 a2=90 a3=2 items=0 ppid=5956 pid=6011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 238.384530] audit: type=1327 audit(1788300980.319:4335): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 238.384568] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.386882] audit: type=1334 audit(1788300980.321:4336): prog-id=1979 op=UNLOAD [ 238.896128] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:16:26 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:16:27 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: This is ip-172-31-28-217 (Linux aarch64 6.18.45-flatcar) 22:16:28 SSH host key: SHA256:xMEYKrnE6Opp8m4JszA2edUGkBu2YSCU0YzaKa8izxU (ECDSA) SSH host key: SHA256:7I5r5BosxASabHu05i2yzgx6Shz7+xfBPvcJEBLvHdM (RSA) SSH host key: SHA256:VnQZwX5P1DvPCLcz66h2c/Dvcd95dySIxHVDYUbY2+A (ED25519) SSH host key: SHA256:mp1F2ggFECdguy84tZ7oNk+srVaOTKI+Fzc/O4FC1MI (MLDSA44-ED25519) eth0: 172.31.28.217 fe80::430:9aff:fefd:b969%eth0 ip-172-31-28-217 login: [ 246.733781] kauditd_printk_skb: 3595 callbacks suppressed [ 246.733787] audit: type=1334 audit(1788300988.697:5540): prog-id=2520 op=LOAD [ 246.738663] audit: type=1300 audit(1788300988.697:5540): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc78f7458 a2=74 a3=10 items=0 ppid=5956 pid=6559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.748949] audit: type=1327 audit(1788300988.697:5540): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003735315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 246.756607] audit: type=1334 audit(1788300988.700:5541): prog-id=2520 op=UNLOAD [ 246.762112] audit: type=1300 audit(1788300988.700:5541): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff93f4df50 a2=74 a3=10 items=0 ppid=5956 pid=6559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.774595] audit: type=1327 audit(1788300988.700:5541): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003735315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 246.781702] audit: type=1334 audit(1788300988.700:5542): prog-id=2521 op=LOAD [ 246.783477] audit: type=1300 audit(1788300988.700:5542): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc78f7438 a2=80 a3=0 items=0 ppid=5956 pid=6559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.793234] audit: type=1327 audit(1788300988.700:5542): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003735315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 246.800970] audit: type=1334 audit(1788300988.700:5543): prog-id=2521 op=UNLOAD [ 253.102591] kauditd_printk_skb: 131 callbacks suppressed [ 253.102597] audit: type=1334 audit(1788300995.066:5591): prog-id=2544 op=LOAD [ 253.106213] audit: type=1300 audit(1788300995.066:5591): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff45642a8 a2=74 a3=11 items=0 ppid=5956 pid=6622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 253.114321] audit: type=1327 audit(1788300995.066:5591): proctitle=74630066696C746572007265706C61636500646576006C786334323165393262653361303900696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333432395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 253.119824] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.121109] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 253.121200] audit: type=1334 audit(1788300995.069:5592): prog-id=2544 op=UNLOAD [ 253.124073] audit: backlog limit exceeded [ 253.125166] audit: type=1300 audit(1788300995.069:5592): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff99471f50 a2=74 a3=11 items=0 ppid=5956 pid=6622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 253.132204] audit: type=1327 audit(1788300995.069:5592): proctitle=74630066696C746572007265706C61636500646576006C786334323165393262653361303900696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333432395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 253.140245] audit: type=1334 audit(1788300995.069:5593): prog-id=2545 op=LOAD