55157] kauditd_printk_skb: 63 callbacks suppressed [ 22.155160] audit: type=1130 audit(1788362643.238:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.160629] audit: type=1334 audit(1788362643.239:156): prog-id=32 op=LOAD [ 22.160699] audit: type=1334 audit(1788362643.239:157): prog-id=33 op=LOAD [ 22.477140] audit: type=1130 audit(1788362643.559:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.484127] audit: type=1334 audit(1788362643.561:159): prog-id=34 op=LOAD [ 22.485362] audit: type=1334 audit(1788362643.567:160): prog-id=7 op=UNLOAD [ 22.486875] audit: type=1334 audit(1788362643.567:161): prog-id=6 op=UNLOAD [ 22.650423] audit: type=1130 audit(1788362643.732:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.761011] audit: type=1130 audit(1788362643.843:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.898505] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 22.902593] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 22.906404] mousedev: PS/2 mouse device common for all mice [ 22.911710] ACPI: button: Power Button [PWRF] [ 22.915578] vmclock AMZNC10C:00: vmclock0: registered miscdev [ 22.915672] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 22.933415] ACPI: button: Sleep Button [SLPF] [ 23.313437] audit: type=1130 audit(1788362644.396:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 23.402536] erofs (device dm-5): mounted with root inode @ nid 40. [ 23.436242] loop6: detected capacity change from 0 to 44096 [ 23.439267] loop6: p1 p2 p3 [ 23.449480] device-mapper: verity: sha256 using "sha256-lib" [ 23.449486] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.449491] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.449494] device-mapper: ioctl: error adding target to table [ 23.452131] device-mapper: verity: sha256 using "sha256-lib" [ 23.500648] erofs (device dm-5): mounted with root inode @ nid 40. [ 23.535061] loop6: detected capacity change from 0 to 168976 [ 23.541072] loop6: p1 p2 p3 [ 23.560327] device-mapper: verity: sha256 using "sha256-lib" [ 23.561426] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.563128] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.564777] device-mapper: ioctl: error adding target to table [ 23.572255] device-mapper: verity: sha256 using "sha256-lib" [ 23.613468] erofs (device dm-5): mounted with root inode @ nid 39. [ 23.636700] loop6: detected capacity change from 0 to 219840 [ 23.671309] loop6: detected capacity change from 0 to 415144 [ 23.675652] loop6: p1 p2 p3 [ 23.686523] device-mapper: verity: sha256 using "sha256-lib" [ 23.687457] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.688860] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.690276] device-mapper: ioctl: error adding target to table [ 23.692954] device-mapper: verity: sha256 using "sha256-lib" [ 23.735384] erofs (device dm-5): mounted with root inode @ nid 39. [ 23.797961] loop6: detected capacity change from 0 to 299984 [ 23.802914] loop6: p1 p2 p3 [ 23.816518] device-mapper: verity: sha256 using "sha256-lib" [ 23.817621] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.819027] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.820438] device-mapper: ioctl: error adding target to table [ 23.822782] device-mapper: verity: sha256 using "sha256-lib" [ 23.869246] erofs (device dm-5): mounted with root inode @ nid 39. [ 23.892269] loop6: detected capacity change from 0 to 168976 [ 23.895182] loop6: p1 p2 p3 [ 23.911183] device-mapper: verity: sha256 using "sha256-lib" [ 23.912311] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 23.914599] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 23.916084] device-mapper: ioctl: error adding target to table [ 23.922180] device-mapper: verity: sha256 using "sha256-lib" [ 23.958680] erofs (device dm-5): mounted with root inode @ nid 39. [ 23.962879] loop7: detected capacity change from 0 to 219840 [ 23.988482] loop8: detected capacity change from 0 to 415144 [ 23.992275] loop8: p1 p2 p3 [ 24.003360] device-mapper: verity: sha256 using "sha256-lib" [ 24.004359] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.005824] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 24.007316] device-mapper: ioctl: error adding target to table [ 24.010608] device-mapper: verity: sha256 using "sha256-lib" [ 24.056363] erofs (device dm-6): mounted with root inode @ nid 39. [ 24.061421] loop9: detected capacity change from 0 to 299984 [ 24.066591] loop9: p1 p2 p3 [ 24.079554] device-mapper: verity: sha256 using "sha256-lib" [ 24.080630] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.084398] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 24.085811] device-mapper: ioctl: error adding target to table [ 24.088526] device-mapper: verity: sha256 using "sha256-lib" [ 24.136401] erofs (device dm-7): mounted with root inode @ nid 39. [ 28.176579] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 28.206816] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/09/02 15:24:12Z: Amazon SSM Agent v3.3.0.0 is running 2026/09/02 15:24:12Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/09/02 15:24:12Z: OsVersion: 9999.9.9 [!p]104\[?7hP+q6E616D65\ This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:24:15 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 43.377251] kauditd_printk_skb: 13 callbacks suppressed [ 43.377254] audit: type=1305 audit(1788362665.405:176): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 43.380258] audit: type=1300 audit(1788362665.405:176): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcc47b5090 a2=420 a3=0 items=0 ppid=2632 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 43.384390] audit: type=1327 audit(1788362665.405:176): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 43.386169] audit: type=1130 audit(1788362665.423:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.389459] audit: type=1131 audit(1788362665.423:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.392411] audit: type=1106 audit(1788362665.427:179): pid=2626 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.395651] audit: type=1104 audit(1788362665.427:180): pid=2626 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.547315] audit: type=1106 audit(1788362665.584:181): pid=2621 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 43.552633] audit: type=1104 audit(1788362665.584:182): pid=2621 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 43.558618] audit: type=1131 audit(1788362665.596:183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.26.76:22-20.76.204.135:35052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.925346] kauditd_printk_skb: 13 callbacks suppressed [ 50.925350] audit: type=1325 audit(1788362672.963:195): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.929219] audit: type=1300 audit(1788362672.963:195): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffdb92923c0 a2=0 a3=0 items=0 ppid=2699 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.934850] audit: type=1327 audit(1788362672.963:195): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 50.937547] audit: type=1325 audit(1788362672.966:196): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.940737] audit: type=1300 audit(1788362672.966:196): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff9255cdd0 a2=0 a3=0 items=0 ppid=2699 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.946596] audit: type=1327 audit(1788362672.966:196): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 50.949131] audit: type=1325 audit(1788362672.969:197): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2755 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.951957] audit: type=1300 audit(1788362672.969:197): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd42a4400 a2=0 a3=0 items=0 ppid=2699 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.957389] audit: type=1327 audit(1788362672.969:197): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 50.960535] audit: type=1325 audit(1788362672.974:198): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.216943] Initializing XFRM netlink socket This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:24:34 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:24:35 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 58.992006] kauditd_printk_skb: 92 callbacks suppressed [ 58.992011] audit: type=1131 audit(1788362681.029:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.004310] audit: type=1334 audit(1788362681.043:232): prog-id=38 op=UNLOAD [ 66.199112] audit: type=1130 audit(1788362688.236:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.366330] audit: type=1131 audit(1788362688.404:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 67.832034] audit: type=1130 audit(1788362689.868:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.835827] audit: type=1131 audit(1788362689.868:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.022493] zram_generator::config[3218]: No configuration found. [ 68.391815] audit: type=1334 audit(1788362690.429:237): prog-id=42 op=LOAD [ 68.393451] audit: type=1334 audit(1788362690.429:238): prog-id=26 op=UNLOAD [ 68.395037] audit: type=1334 audit(1788362690.429:239): prog-id=43 op=LOAD [ 68.396499] audit: type=1334 audit(1788362690.429:240): prog-id=44 op=LOAD [ 68.397866] audit: type=1334 audit(1788362690.429:241): prog-id=27 op=UNLOAD [ 68.399239] audit: type=1334 audit(1788362690.429:242): prog-id=28 op=UNLOAD [ 75.205811] zram_generator::config[3887]: No configuration found. [ 75.630774] kauditd_printk_skb: 204 callbacks suppressed [ 75.630777] audit: type=1334 audit(1788362697.668:339): prog-id=92 op=LOAD [ 75.633962] audit: type=1334 audit(1788362697.668:340): prog-id=82 op=UNLOAD [ 75.635962] audit: type=1334 audit(1788362697.672:341): prog-id=93 op=LOAD [ 75.637785] audit: type=1334 audit(1788362697.672:342): prog-id=87 op=UNLOAD [ 75.639302] audit: type=1334 audit(1788362697.673:343): prog-id=94 op=LOAD [ 75.640814] audit: type=1334 audit(1788362697.673:344): prog-id=42 op=UNLOAD [ 75.642586] audit: type=1334 audit(1788362697.673:345): prog-id=95 op=LOAD [ 75.643996] audit: type=1334 audit(1788362697.673:346): prog-id=96 op=LOAD [ 75.645564] audit: type=1334 audit(1788362697.673:347): prog-id=43 op=UNLOAD [ 75.647156] audit: type=1334 audit(1788362697.673:348): prog-id=44 op=UNLOAD [ 81.816416] kauditd_printk_skb: 54 callbacks suppressed [ 81.816420] audit: type=1334 audit(1788362703.854:403): prog-id=118 op=LOAD [ 81.821214] audit: type=1334 audit(1788362703.857:404): prog-id=119 op=LOAD [ 81.824702] audit: type=1300 audit(1788362703.857:404): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3095e5da9fd8 a2=98 a3=0 items=0 ppid=4033 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.836532] audit: type=1327 audit(1788362703.857:404): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164323662326238653735613138656662363031323861386364643432 [ 81.847272] audit: type=1334 audit(1788362703.857:405): prog-id=119 op=UNLOAD [ 81.848897] audit: type=1300 audit(1788362703.857:405): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4033 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.854241] audit: type=1327 audit(1788362703.857:405): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164323662326238653735613138656662363031323861386364643432 [ 81.859623] audit: type=1334 audit(1788362703.870:406): prog-id=120 op=LOAD [ 81.861387] audit: type=1300 audit(1788362703.870:406): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3095e5daa290 a2=98 a3=0 items=0 ppid=4033 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.867525] audit: type=1327 audit(1788362703.870:406): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164323662326238653735613138656662363031323861386364643432 [ 89.610090] kauditd_printk_skb: 224 callbacks suppressed [ 89.610093] audit: type=1334 audit(1788362711.647:483): prog-id=136 op=LOAD [ 89.615129] audit: type=1334 audit(1788362711.652:484): prog-id=137 op=LOAD [ 89.616403] audit: type=1300 audit(1788362711.652:484): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2219758e9fd8 a2=98 a3=0 items=0 ppid=4033 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.622268] audit: type=1327 audit(1788362711.652:484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353630353938636662303463646365656666346334666132636134 [ 89.627359] audit: type=1334 audit(1788362711.652:485): prog-id=137 op=UNLOAD [ 89.628910] audit: type=1300 audit(1788362711.652:485): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4033 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.637292] audit: type=1327 audit(1788362711.652:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353630353938636662303463646365656666346334666132636134 [ 89.642940] audit: type=1334 audit(1788362711.660:486): prog-id=138 op=LOAD [ 89.644554] audit: type=1300 audit(1788362711.660:486): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2219758ea290 a2=98 a3=0 items=0 ppid=4033 pid=4350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.654252] audit: type=1327 audit(1788362711.660:486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353630353938636662303463646365656666346334666132636134 [ 94.787610] kauditd_printk_skb: 122 callbacks suppressed [ 94.787614] audit: type=1334 audit(1788362716.825:535): prog-id=164 op=LOAD [ 94.789903] audit: type=1300 audit(1788362716.825:535): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc14cace0 a2=74 a3=7ffcc14cace0 items=0 ppid=4577 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.795413] audit: type=1327 audit(1788362716.825:535): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 94.797776] audit: type=1334 audit(1788362716.825:536): prog-id=164 op=UNLOAD [ 94.799522] audit: type=1300 audit(1788362716.825:536): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffcc14cace0 a2=74 a3=7ffcc14cace0 items=0 ppid=4577 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.804810] audit: type=1327 audit(1788362716.825:536): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 94.806730] audit: type=1334 audit(1788362716.825:537): prog-id=165 op=LOAD [ 94.807856] audit: type=1300 audit(1788362716.825:537): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc14c9d60 a2=90 a3=2 items=0 ppid=4577 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.813095] audit: type=1327 audit(1788362716.825:537): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 94.815099] audit: type=1334 audit(1788362716.825:538): prog-id=165 op=UNLOAD This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:20 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 98.781252] NET: Registered PF_ALG protocol family This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:21 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:22 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 100.315097] eth0: renamed from tmpcfa54 [ 100.341216] eth0: renamed from tmpd65d2 [ 101.142586] kauditd_printk_skb: 6758 callbacks suppressed [ 101.142591] audit: type=1334 audit(1788362723.180:2774): prog-id=1270 op=LOAD [ 101.150097] audit: type=1300 audit(1788362723.180:2774): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc7b912800 a2=74 a3=7ffc7b912800 items=0 ppid=4577 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.157460] audit: type=1327 audit(1788362723.180:2774): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333134315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.163089] audit: type=1334 audit(1788362723.180:2775): prog-id=1270 op=UNLOAD [ 101.164594] audit: type=1300 audit(1788362723.180:2775): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc7b912800 a2=74 a3=7ffc7b912800 items=0 ppid=4577 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.170968] audit: type=1327 audit(1788362723.180:2775): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333134315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.178776] audit: type=1334 audit(1788362723.180:2776): prog-id=1271 op=LOAD [ 101.180616] audit: type=1300 audit(1788362723.180:2776): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc7b912790 a2=80 a3=0 items=0 ppid=4577 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.185755] audit: type=1327 audit(1788362723.180:2776): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333134315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.189925] audit: type=1334 audit(1788362723.180:2777): prog-id=1271 op=UNLOAD This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:23 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:24 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:25:25 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 106.994571] kauditd_printk_skb: 579 callbacks suppressed [ 106.994574] audit: type=1325 audit(1788362729.032:2973): table=filter:148 family=2 entries=11 op=nft_register_rule pid=5247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.998547] audit: type=1300 audit(1788362729.032:2973): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdcb8ff4b0 a2=0 a3=7ffdcb8ff49c items=0 ppid=4172 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.004319] audit: type=1327 audit(1788362729.032:2973): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 107.019500] audit: type=1325 audit(1788362729.057:2974): table=nat:149 family=2 entries=45 op=nft_register_chain pid=5247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 107.022365] audit: type=1300 audit(1788362729.057:2974): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffdcb8ff4b0 a2=0 a3=7ffdcb8ff49c items=0 ppid=4172 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.027824] audit: type=1327 audit(1788362729.057:2974): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 122.617496] audit: type=1130 audit(1788362744.654:2975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-172.31.26.76:22-20.76.204.135:58208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.540028] audit: type=1101 audit(1788362745.577:2976): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 123.545755] audit: type=1103 audit(1788362745.580:2977): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 123.551292] audit: type=1006 audit(1788362745.580:2978): pid=5252 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 123.554131] audit: type=1300 audit(1788362745.580:2978): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffe1c574b0 a2=3 a3=0 items=0 ppid=1 pid=5252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.559629] audit: type=1327 audit(1788362745.580:2978): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 123.571157] audit: type=1105 audit(1788362745.609:2979): pid=5252 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 123.577532] audit: type=1103 audit(1788362745.612:2980): pid=5256 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 124.746283] audit: type=1106 audit(1788362746.784:2981): pid=5252 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 124.753979] audit: type=1104 audit(1788362746.784:2982): pid=5252 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 129.909983] kauditd_printk_skb: 1 callbacks suppressed [ 129.909987] audit: type=1130 audit(1788362751.947:2984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.26.76:22-20.76.204.135:43818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 130.747137] audit: type=1101 audit(1788362752.785:2985): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 130.752754] audit: type=1103 audit(1788362752.788:2986): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 130.758533] audit: type=1006 audit(1788362752.788:2987): pid=5269 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 130.761398] audit: type=1300 audit(1788362752.788:2987): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc58c9a7c0 a2=3 a3=0 items=0 ppid=1 pid=5269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.767135] audit: type=1327 audit(1788362752.788:2987): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 130.772946] audit: type=1105 audit(1788362752.810:2988): pid=5269 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 130.779180] audit: type=1103 audit(1788362752.813:2989): pid=5273 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 131.308722] audit: type=1106 audit(1788362753.346:2990): pid=5269 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 131.315851] audit: type=1104 audit(1788362753.346:2991): pid=5269 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 136.471574] kauditd_printk_skb: 1 callbacks suppressed [ 136.471578] audit: type=1130 audit(1788362758.509:2993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.26.76:22-20.76.204.135:50574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.306113] audit: type=1101 audit(1788362759.344:2994): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 137.312555] audit: type=1103 audit(1788362759.346:2995): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 137.318295] audit: type=1006 audit(1788362759.346:2996): pid=5289 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 137.321288] audit: type=1300 audit(1788362759.346:2996): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff71fd75f0 a2=3 a3=0 items=0 ppid=1 pid=5289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.326889] audit: type=1327 audit(1788362759.346:2996): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 137.334075] audit: type=1105 audit(1788362759.371:2997): pid=5289 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 137.340177] audit: type=1103 audit(1788362759.376:2998): pid=5293 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 137.869657] audit: type=1106 audit(1788362759.907:2999): pid=5289 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 137.876191] audit: type=1104 audit(1788362759.907:3000): pid=5289 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 143.036510] kauditd_printk_skb: 1 callbacks suppressed [ 143.036514] audit: type=1130 audit(1788362765.074:3002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-6-172.31.26.76:22-20.76.204.135:50582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.894291] audit: type=1101 audit(1788362765.932:3003): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 143.901478] audit: type=1103 audit(1788362765.934:3004): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 143.907728] audit: type=1006 audit(1788362765.934:3005): pid=5308 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 143.911652] audit: type=1300 audit(1788362765.934:3005): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe29f58070 a2=3 a3=0 items=0 ppid=1 pid=5308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.917830] audit: type=1327 audit(1788362765.934:3005): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 143.920130] audit: type=1105 audit(1788362765.957:3006): pid=5308 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 143.926557] audit: type=1103 audit(1788362765.960:3007): pid=5312 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 144.476027] audit: type=1106 audit(1788362766.513:3008): pid=5308 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 144.482455] audit: type=1104 audit(1788362766.514:3009): pid=5308 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.772178] kauditd_printk_skb: 23 callbacks suppressed [ 152.772181] audit: type=1130 audit(1788362774.810:3029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-8-172.31.26.76:22-20.76.204.135:57394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.615897] audit: type=1101 audit(1788362775.654:3030): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 153.621684] audit: type=1103 audit(1788362775.656:3031): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 153.627170] audit: type=1006 audit(1788362775.656:3032): pid=5358 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 153.630275] audit: type=1300 audit(1788362775.656:3032): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc25513870 a2=3 a3=0 items=0 ppid=1 pid=5358 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.635886] audit: type=1327 audit(1788362775.656:3032): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 153.642091] audit: type=1105 audit(1788362775.680:3033): pid=5358 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 153.648678] audit: type=1103 audit(1788362775.686:3034): pid=5362 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 154.173923] audit: type=1106 audit(1788362776.211:3035): pid=5358 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 154.180260] audit: type=1104 audit(1788362776.211:3036): pid=5358 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.174575] kauditd_printk_skb: 20 callbacks suppressed [ 158.174583] audit: type=1325 audit(1788362780.210:3053): table=filter:150 family=2 entries=20 op=nft_register_rule pid=5402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.181477] audit: type=1300 audit(1788362780.210:3053): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffd60f5ea0 a2=0 a3=7fffd60f5e8c items=0 ppid=4172 pid=5402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.188623] audit: type=1327 audit(1788362780.210:3053): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 158.193102] audit: type=1325 audit(1788362780.218:3054): table=nat:151 family=2 entries=18 op=nft_register_rule pid=5402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.196303] audit: type=1300 audit(1788362780.218:3054): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fffd60f5ea0 a2=0 a3=0 items=0 ppid=4172 pid=5402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.203477] audit: type=1327 audit(1788362780.218:3054): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 158.378199] audit: type=1106 audit(1788362780.416:3055): pid=5388 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.386768] audit: type=1104 audit(1788362780.416:3056): pid=5388 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.393079] audit: type=1131 audit(1788362780.418:3057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4103-172.31.26.76:22-20.76.204.135:59136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.540461] audit: type=1130 audit(1788362780.578:3058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10-172.31.26.76:22-20.76.204.135:59142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.625477] kauditd_printk_skb: 27 callbacks suppressed [ 164.625481] audit: type=1325 audit(1788362786.663:3078): table=filter:154 family=2 entries=20 op=nft_register_rule pid=5438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.629364] audit: type=1300 audit(1788362786.663:3078): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd24c90c00 a2=0 a3=7ffd24c90bec items=0 ppid=4172 pid=5438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.635143] audit: type=1327 audit(1788362786.663:3078): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 164.637847] audit: type=1325 audit(1788362786.674:3079): table=nat:155 family=2 entries=102 op=nft_register_chain pid=5438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.640998] audit: type=1300 audit(1788362786.674:3079): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd24c90c00 a2=0 a3=7ffd24c90bec items=0 ppid=4172 pid=5438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.646478] audit: type=1327 audit(1788362786.674:3079): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 166.822613] audit: type=1130 audit(1788362788.859:3080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-11-172.31.26.76:22-20.76.204.135:55224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.652244] audit: type=1101 audit(1788362789.690:3081): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 167.659109] audit: type=1103 audit(1788362789.697:3082): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 167.664648] audit: type=1006 audit(1788362789.697:3083): pid=5440 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 173.384084] kauditd_printk_skb: 7 callbacks suppressed [ 173.384088] audit: type=1130 audit(1788362795.421:3089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4105-172.31.26.76:22-20.76.204.135:55232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.222668] audit: type=1101 audit(1788362796.260:3090): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.228226] audit: type=1103 audit(1788362796.263:3091): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.233238] audit: type=1006 audit(1788362796.263:3092): pid=5459 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 174.236358] audit: type=1300 audit(1788362796.263:3092): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff4f638aa0 a2=3 a3=0 items=0 ppid=1 pid=5459 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.241945] audit: type=1327 audit(1788362796.263:3092): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 174.249520] audit: type=1105 audit(1788362796.287:3093): pid=5459 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.255753] audit: type=1103 audit(1788362796.290:3094): pid=5463 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.775062] audit: type=1106 audit(1788362796.812:3095): pid=5459 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.781566] audit: type=1104 audit(1788362796.813:3096): pid=5459 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:26:40 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 179.756344] kauditd_printk_skb: 17 callbacks suppressed [ 179.756348] audit: type=1106 audit(1788362801.794:3112): pid=5475 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 179.763939] audit: type=1104 audit(1788362801.794:3113): pid=5475 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 179.774377] audit: type=1131 audit(1788362801.812:3114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-12-172.31.26.76:22-20.76.204.135:44884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:26:41 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 179.920809] audit: type=1130 audit(1788362801.958:3115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4106-172.31.26.76:22-20.76.204.135:44896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.790850] audit: type=1101 audit(1788362802.828:3116): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 180.796229] audit: type=1103 audit(1788362802.831:3117): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 180.801317] audit: type=1006 audit(1788362802.831:3118): pid=5626 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 180.804340] audit: type=1300 audit(1788362802.831:3118): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb4f104c0 a2=3 a3=0 items=0 ppid=1 pid=5626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.809758] audit: type=1327 audit(1788362802.831:3118): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 180.816224] audit: type=1105 audit(1788362802.854:3119): pid=5626 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 184.813783] kauditd_printk_skb: 109 callbacks suppressed [ 184.813788] audit: type=1334 audit(1788362806.851:3173): prog-id=1410 op=LOAD [ 184.817552] audit: type=1334 audit(1788362806.854:3174): prog-id=1411 op=LOAD [ 184.818815] audit: type=1300 audit(1788362806.854:3174): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=144bb96ebfd8 a2=98 a3=0 items=0 ppid=5656 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.824227] audit: type=1327 audit(1788362806.854:3174): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138316538663033386435633762323633636637306331313036343364 [ 184.830258] audit: type=1334 audit(1788362806.854:3175): prog-id=1411 op=UNLOAD [ 184.831846] audit: type=1300 audit(1788362806.854:3175): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5656 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.837420] audit: type=1327 audit(1788362806.854:3175): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138316538663033386435633762323633636637306331313036343364 [ 184.843051] audit: type=1334 audit(1788362806.854:3176): prog-id=1412 op=LOAD [ 184.844733] audit: type=1300 audit(1788362806.854:3176): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=144bb96ec290 a2=98 a3=0 items=0 ppid=5656 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.850915] audit: type=1327 audit(1788362806.854:3176): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138316538663033386435633762323633636637306331313036343364 [ 186.994309] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 189.834376] kauditd_printk_skb: 6674 callbacks suppressed [ 189.834379] audit: type=1415 audit(1788362811.872:5395): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=192.168.0.125 dst=192.168.1.156 spi=3(0x3) res=1 [ 189.838926] audit: type=1300 audit(1788362811.872:5395): arch=c000003e syscall=44 success=yes exit=364 a0=1a a1=c00024a300 a2=16c a3=0 items=0 ppid=5656 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 189.844940] audit: type=1327 audit(1788362811.872:5395): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 189.847573] audit: type=1415 audit(1788362811.872:5396): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 189.851131] audit: type=1300 audit(1788362811.872:5396): arch=c000003e syscall=44 success=yes exit=264 a0=1a a1=c000a845a0 a2=108 a3=0 items=0 ppid=5656 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 189.856868] audit: type=1327 audit(1788362811.872:5396): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 189.859658] audit: type=1415 audit(1788362811.872:5397): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=0.0.0.0 dst=192.168.0.125 spi=3(0x3) res=1 [ 189.862659] audit: type=1300 audit(1788362811.872:5397): arch=c000003e syscall=44 success=yes exit=364 a0=1a a1=c00024a480 a2=16c a3=0 items=0 ppid=5656 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 189.868483] audit: type=1327 audit(1788362811.872:5397): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 189.871247] audit: type=1415 audit(1788362811.872:5398): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:26:53 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:26:54 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: This is ip-172-31-26-76 (Linux x86_64 6.18.45-flatcar) 15:26:55 SSH host key: SHA256:tEQNCt0igXklsyXs98ON6htKmCZdd29kY6d8MMeIPko (MLDSA44-ED25519) SSH host key: SHA256:7qwTyQd1g9IuUdxkRJ7nMp4HwGXMiEhav2Yyuowj6Bc (ED25519) SSH host key: SHA256:CLlxNbQsc5EZLYqib8HnR7X5t3huq/NoBEsReSBmHNg (ECDSA) SSH host key: SHA256:y5fiKno4LoYIyctImQCOvIsSblAMEufHxIdWd89LNls (RSA) eth0: 172.31.26.76 fe80::4f7:40ff:fe01:1d73%eth0 ip-172-31-26-76 login: [ 196.667773] kauditd_printk_skb: 480 callbacks suppressed [ 196.667778] audit: type=1106 audit(1788362818.705:5565): pid=5788 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 196.682810] audit: type=1104 audit(1788362818.713:5566): pid=5788 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 196.696317] audit: type=1131 audit(1788362818.717:5567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4108-172.31.26.76:22-20.76.204.135:44922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.757513] audit: type=1334 audit(1788362818.795:5568): prog-id=2550 op=LOAD [ 196.761395] audit: type=1300 audit(1788362818.795:5568): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffff1d42690 a2=74 a3=7ffff1d42690 items=0 ppid=5891 pid=6567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 196.766973] audit: type=1327 audit(1788362818.795:5568): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313031345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 196.771743] audit: type=1334 audit(1788362818.797:5569): prog-id=2550 op=UNLOAD [ 196.773462] audit: type=1300 audit(1788362818.797:5569): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffff1d42690 a2=74 a3=7ffff1d42690 items=0 ppid=5891 pid=6567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 196.779321] audit: type=1327 audit(1788362818.797:5569): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313031345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 196.786096] audit: type=1334 audit(1788362818.797:5570): prog-id=2551 op=LOAD