[2026-07-11 04:18:22,196] INFO Registered `kafka:type=kafka.Log4jController` MBean (kafka.utils.Log4jControllerRegistration$) [2026-07-11 04:18:22,397] INFO Registered signal handlers for TERM, INT, HUP (org.apache.kafka.common.utils.LoggingSignalHandler) [2026-07-11 04:18:22,398] INFO [ControllerServer id=0] Starting controller (kafka.server.ControllerServer) [2026-07-11 04:18:22,575] INFO Updated connection-accept-rate max connection creation rate to 2147483647 (kafka.network.ConnectionQuotas) [2026-07-11 04:18:22,599] INFO [SocketServer listenerType=CONTROLLER, nodeId=0] Created data-plane acceptor and processors for endpoint : ListenerName(CONTROLLER) (kafka.network.SocketServer) [2026-07-11 04:18:22,603] INFO authorizerStart completed for endpoint CONTROLLER. Endpoint is now READY. (org.apache.kafka.server.network.EndpointReadyFutures) [2026-07-11 04:18:22,604] INFO [SharedServer id=0] Starting SharedServer (kafka.server.SharedServer) [2026-07-11 04:18:22,635] INFO [LogLoader partition=__cluster_metadata-0, dir=/data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed] Loading producer state till offset 0 (org.apache.kafka.storage.internals.log.UnifiedLog) [2026-07-11 04:18:22,635] INFO [LogLoader partition=__cluster_metadata-0, dir=/data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed] Reloading from producer snapshot and rebuilding producer state from offset 0 (org.apache.kafka.storage.internals.log.UnifiedLog) [2026-07-11 04:18:22,635] INFO [LogLoader partition=__cluster_metadata-0, dir=/data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed] Producer state recovery took 0ms for snapshot load and 0ms for segment recovery from offset 0 (org.apache.kafka.storage.internals.log.UnifiedLog) [2026-07-11 04:18:22,646] INFO Initialized snapshots with IDs SortedSet() from /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed/__cluster_metadata-0 (kafka.raft.KafkaMetadataLog$) [2026-07-11 04:18:22,653] INFO [raft-expiration-reaper]: Starting (org.apache.kafka.raft.TimingWheelExpirationService$ExpiredOperationReaper) [2026-07-11 04:18:22,659] INFO [RaftManager id=0] Reading KRaft snapshot and log as part of the initialization (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,660] INFO [RaftManager id=0] Starting voters are VoterSet(voters={0=VoterNode(voterKey=ReplicaKey(id=0, directoryId=), listeners=Endpoints(endpoints={ListenerName(CONTROLLER)=/127.0.0.1:44521}), supportedKRaftVersion=SupportedVersionRange[min_version:0, max_version:0])}) (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,663] INFO [RaftManager id=0] Starting request manager with static voters: [127.0.0.1:44521 (id: 0 rack: null isFenced: false)] (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,665] INFO [RaftManager id=0] Attempting durable transition to UnattachedState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, voters=[0], electionTimeoutMs=1902, highWatermark=Optional.empty) from null (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,684] INFO [RaftManager id=0] Completed transition to UnattachedState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, voters=[0], electionTimeoutMs=1902, highWatermark=Optional.empty) from null (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,687] INFO [RaftManager id=0] Completed transition to ProspectiveState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), electionTimeoutMs=1281, highWatermark=Optional.empty) from UnattachedState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, voters=[0], electionTimeoutMs=1902, highWatermark=Optional.empty) (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,688] INFO [RaftManager id=0] Attempting durable transition to CandidateState(localId=0, localDirectoryId=YFUWQC0rsRKrsNAXwJstwA, epoch=1, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), highWatermark=Optional.empty, electionTimeoutMs=1628) from ProspectiveState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), electionTimeoutMs=1281, highWatermark=Optional.empty) (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,698] INFO [RaftManager id=0] Completed transition to CandidateState(localId=0, localDirectoryId=YFUWQC0rsRKrsNAXwJstwA, epoch=1, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), highWatermark=Optional.empty, electionTimeoutMs=1628) from ProspectiveState(epoch=0, leaderId=OptionalInt.empty, votedKey=Optional.empty, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), electionTimeoutMs=1281, highWatermark=Optional.empty) (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,701] INFO [RaftManager id=0] Attempting durable transition to Leader(localVoterNode=VoterNode(voterKey=ReplicaKey(id=0, directoryId=YFUWQC0rsRKrsNAXwJstwA), listeners=Endpoints(endpoints={ListenerName(CONTROLLER)=127.0.0.1/:44521}), supportedKRaftVersion=SupportedVersionRange[min_version:0, max_version:1]), epoch=1, epochStartOffset=0, highWatermark=Optional.empty, voterStates={0=ReplicaState(replicaKey=ReplicaKey(id=0, directoryId=), endOffset=Optional.empty, lastFetchTimestamp=-1, lastCaughtUpTimestamp=-1, hasAcknowledgedLeader=true)}) from CandidateState(localId=0, localDirectoryId=YFUWQC0rsRKrsNAXwJstwA, epoch=1, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), highWatermark=Optional.empty, electionTimeoutMs=1628) (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,710] INFO [RaftManager id=0] Completed transition to Leader(localVoterNode=VoterNode(voterKey=ReplicaKey(id=0, directoryId=YFUWQC0rsRKrsNAXwJstwA), listeners=Endpoints(endpoints={ListenerName(CONTROLLER)=127.0.0.1/:44521}), supportedKRaftVersion=SupportedVersionRange[min_version:0, max_version:1]), epoch=1, epochStartOffset=0, highWatermark=Optional.empty, voterStates={0=ReplicaState(replicaKey=ReplicaKey(id=0, directoryId=), endOffset=Optional.empty, lastFetchTimestamp=-1, lastCaughtUpTimestamp=-1, hasAcknowledgedLeader=true)}) from CandidateState(localId=0, localDirectoryId=YFUWQC0rsRKrsNAXwJstwA, epoch=1, epochElection=EpochElection(voterStates={0=VoterState(replicaKey=ReplicaKey(id=0, directoryId=), state=GRANTED)}), highWatermark=Optional.empty, electionTimeoutMs=1628) (org.apache.kafka.raft.QuorumState) [2026-07-11 04:18:22,734] INFO [kafka-0-raft-io-thread]: Starting (org.apache.kafka.raft.KafkaRaftClientDriver) [2026-07-11 04:18:22,734] INFO [kafka-0-raft-outbound-request-thread]: Starting (org.apache.kafka.raft.KafkaNetworkChannel$SendThread) [2026-07-11 04:18:22,743] INFO [MetadataLoader id=0] initializeNewPublishers: the loader is still catching up because we still don't know the high water mark yet. (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,744] INFO [ControllerServer id=0] Waiting for controller quorum voters future (kafka.server.ControllerServer) [2026-07-11 04:18:22,744] INFO [ControllerServer id=0] Finished waiting for controller quorum voters future (kafka.server.ControllerServer) [2026-07-11 04:18:22,746] INFO [RaftManager id=0] High watermark set to LogOffsetMetadata(offset=1, metadata=Optional[(segmentBaseOffset=0,relativePositionInSegment=91)]) for the first time for epoch 1 based on indexOfHw 0 and voters [ReplicaState(replicaKey=ReplicaKey(id=0, directoryId=), endOffset=Optional[LogOffsetMetadata(offset=1, metadata=Optional[(segmentBaseOffset=0,relativePositionInSegment=91)])], lastFetchTimestamp=-1, lastCaughtUpTimestamp=-1, hasAcknowledgedLeader=true)] (org.apache.kafka.raft.LeaderState) [2026-07-11 04:18:22,766] INFO [RaftManager id=0] Registered the listener org.apache.kafka.image.loader.MetadataLoader@839565077 (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,766] INFO [RaftManager id=0] Registered the listener org.apache.kafka.controller.QuorumController$QuorumMetaLogListener@193631363 (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,766] INFO [controller-0-ThrottledChannelReaper-Fetch]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,766] INFO [controller-0-ThrottledChannelReaper-Produce]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,767] INFO [RaftManager id=0] Setting the next offset of org.apache.kafka.controller.QuorumController$QuorumMetaLogListener@193631363 to 0 since there are no snapshots (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,767] INFO [controller-0-ThrottledChannelReaper-Request]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,767] INFO [controller-0-ThrottledChannelReaper-ControllerMutation]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,768] INFO [RaftManager id=0] Setting the next offset of org.apache.kafka.image.loader.MetadataLoader@839565077 to 0 since there are no snapshots (org.apache.kafka.raft.KafkaRaftClient) [2026-07-11 04:18:22,769] INFO [MetadataLoader id=0] maybePublishMetadata(LOG_DELTA): The loader is still catching up because we have not loaded a controller record as of offset 0 and high water mark is 1 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,779] INFO [ExpirationReaper-0-AlterAcls]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,790] INFO [ControllerServer id=0] Waiting for the controller metadata publishers to be installed (kafka.server.ControllerServer) [2026-07-11 04:18:22,790] INFO [ControllerServer id=0] Finished waiting for the controller metadata publishers to be installed (kafka.server.ControllerServer) [2026-07-11 04:18:22,790] INFO [MetadataLoader id=0] initializeNewPublishers: The loader is still catching up because we have not loaded a controller record as of offset 0 and high water mark is 1 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,790] INFO [SocketServer listenerType=CONTROLLER, nodeId=0] Enabling request processing. (kafka.network.SocketServer) [2026-07-11 04:18:22,792] INFO Awaiting socket connections on 127.0.0.1:44521. (kafka.network.DataPlaneAcceptor) [2026-07-11 04:18:22,806] INFO [controller-0-to-controller-registration-channel-manager]: Starting (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,806] INFO [MetadataLoader id=0] maybePublishMetadata(LOG_DELTA): The loader finished catching up to the current high water mark of 8 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,807] INFO [ControllerRegistrationManager id=0 incarnation=MD6Y3zGFRA-XGJQ0VwHchA] initialized channel manager. (kafka.server.ControllerRegistrationManager) [2026-07-11 04:18:22,807] INFO [ControllerRegistrationManager id=0 incarnation=MD6Y3zGFRA-XGJQ0VwHchA] maybeSendControllerRegistration: cannot register yet because the metadata.version is not known yet. (kafka.server.ControllerRegistrationManager) [2026-07-11 04:18:22,807] INFO [controller-0-to-controller-registration-channel-manager]: Recorded new KRaft controller, from now on will use node 127.0.0.1:44521 (id: 0 rack: null isFenced: false) (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,807] INFO [ControllerServer id=0] Waiting for all of the authorizer futures to be completed (kafka.server.ControllerServer) [2026-07-11 04:18:22,808] INFO [ControllerServer id=0] Finished waiting for all of the authorizer futures to be completed (kafka.server.ControllerServer) [2026-07-11 04:18:22,808] INFO [ControllerServer id=0] Waiting for all of the SocketServer Acceptors to be started (kafka.server.ControllerServer) [2026-07-11 04:18:22,808] INFO [ControllerServer id=0] Finished waiting for all of the SocketServer Acceptors to be started (kafka.server.ControllerServer) [2026-07-11 04:18:22,808] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing SnapshotGenerator with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,808] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing KRaftMetadataCachePublisher with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,808] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing FeaturesPublisher with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,808] INFO [BrokerServer id=0] Transition from SHUTDOWN to STARTING (kafka.server.BrokerServer) [2026-07-11 04:18:22,809] INFO [BrokerServer id=0] Starting broker (kafka.server.BrokerServer) [2026-07-11 04:18:22,813] INFO [broker-0-ThrottledChannelReaper-Fetch]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,813] INFO [broker-0-ThrottledChannelReaper-Produce]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,813] INFO [broker-0-ThrottledChannelReaper-Request]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,813] INFO [broker-0-ThrottledChannelReaper-ControllerMutation]: Starting (kafka.server.ClientQuotaManager$ThrottledChannelReaper) [2026-07-11 04:18:22,818] INFO [ControllerServer id=0] Loaded new metadata FinalizedFeatures[metadataVersion=4.1-IV1, finalizedFeatures={group.version=1, transaction.version=2, eligible.leader.replicas.version=1, metadata.version=27}, finalizedFeaturesEpoch=7]. (org.apache.kafka.metadata.publisher.FeaturesPublisher) [2026-07-11 04:18:22,818] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing ControllerRegistrationsPublisher with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,818] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing ControllerRegistrationManager with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,819] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing DynamicConfigPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,822] INFO [DynamicConfigPublisher controller id=0] Updating cluster configuration : min.insync.replicas -> 1 (kafka.server.metadata.DynamicConfigPublisher) [2026-07-11 04:18:22,825] INFO [ControllerRegistrationManager id=0 incarnation=MD6Y3zGFRA-XGJQ0VwHchA] sendControllerRegistration: attempting to send ControllerRegistrationRequestData(controllerId=0, incarnationId=MD6Y3zGFRA-XGJQ0VwHchA, zkMigrationReady=false, listeners=[Listener(name='CONTROLLER', host='127.0.0.1', port=44521, securityProtocol=0)], features=[Feature(name='group.version', minSupportedVersion=0, maxSupportedVersion=1), Feature(name='transaction.version', minSupportedVersion=0, maxSupportedVersion=2), Feature(name='eligible.leader.replicas.version', minSupportedVersion=0, maxSupportedVersion=1), Feature(name='kraft.version', minSupportedVersion=0, maxSupportedVersion=1), Feature(name='metadata.version', minSupportedVersion=7, maxSupportedVersion=27), Feature(name='share.version', minSupportedVersion=0, maxSupportedVersion=1)]) (kafka.server.ControllerRegistrationManager) [2026-07-11 04:18:22,826] INFO KafkaConfig values: add.partitions.to.txn.retry.backoff.max.ms = 100 add.partitions.to.txn.retry.backoff.ms = 20 advertised.listeners = SASL_PLAINTEXT://127.0.0.1:48261 alter.config.policy.class.name = null alter.log.dirs.replication.quota.window.num = 11 alter.log.dirs.replication.quota.window.size.seconds = 1 authorizer.class.name = auto.create.topics.enable = true auto.leader.rebalance.enable = true background.threads = 10 broker.heartbeat.interval.ms = 2000 broker.id = 0 broker.rack = null broker.session.timeout.ms = 9000 client.quota.callback.class = null compression.gzip.level = -1 compression.lz4.level = 9 compression.type = producer compression.zstd.level = 3 connection.failed.authentication.delay.ms = 100 connections.max.idle.ms = 600000 connections.max.reauth.ms = 0 controlled.shutdown.enable = true controller.listener.names = CONTROLLER controller.performance.always.log.threshold.ms = 2000 controller.performance.sample.period.ms = 60000 controller.quorum.append.linger.ms = 25 controller.quorum.bootstrap.servers = [] controller.quorum.election.backoff.max.ms = 1000 controller.quorum.election.timeout.ms = 1000 controller.quorum.fetch.timeout.ms = 2000 controller.quorum.request.timeout.ms = 2000 controller.quorum.retry.backoff.ms = 20 controller.quorum.voters = [0@127.0.0.1:44521] controller.quota.window.num = 11 controller.quota.window.size.seconds = 1 controller.socket.timeout.ms = 30000 create.topic.policy.class.name = null default.replication.factor = 1 delegation.token.expiry.check.interval.ms = 3600000 delegation.token.expiry.time.ms = 86400000 delegation.token.max.lifetime.ms = 604800000 delegation.token.secret.key = null delete.records.purgatory.purge.interval.requests = 1 delete.topic.enable = true early.start.listeners = null fetch.max.bytes = 57671680 fetch.purgatory.purge.interval.requests = 1000 group.consumer.assignors = [uniform, range] group.consumer.heartbeat.interval.ms = 5000 group.consumer.max.heartbeat.interval.ms = 15000 group.consumer.max.session.timeout.ms = 60000 group.consumer.max.size = 2147483647 group.consumer.migration.policy = bidirectional group.consumer.min.heartbeat.interval.ms = 5000 group.consumer.min.session.timeout.ms = 45000 group.consumer.regex.refresh.interval.ms = 600000 group.consumer.session.timeout.ms = 45000 group.coordinator.append.linger.ms = 5 group.coordinator.rebalance.protocols = [classic, consumer, streams] group.coordinator.threads = 4 group.initial.rebalance.delay.ms = 3000 group.max.session.timeout.ms = 1800000 group.max.size = 2147483647 group.min.session.timeout.ms = 6000 group.share.assignors = [simple] group.share.delivery.count.limit = 5 group.share.enable = false group.share.heartbeat.interval.ms = 5000 group.share.max.heartbeat.interval.ms = 15000 group.share.max.record.lock.duration.ms = 60000 group.share.max.session.timeout.ms = 60000 group.share.max.share.sessions = 2000 group.share.max.size = 200 group.share.min.heartbeat.interval.ms = 5000 group.share.min.record.lock.duration.ms = 15000 group.share.min.session.timeout.ms = 45000 group.share.partition.max.record.locks = 2000 group.share.persister.class.name = org.apache.kafka.server.share.persister.DefaultStatePersister group.share.record.lock.duration.ms = 30000 group.share.session.timeout.ms = 45000 group.streams.heartbeat.interval.ms = 5000 group.streams.max.heartbeat.interval.ms = 15000 group.streams.max.session.timeout.ms = 60000 group.streams.max.size = 2147483647 group.streams.max.standby.replicas = 2 group.streams.min.heartbeat.interval.ms = 5000 group.streams.min.session.timeout.ms = 45000 group.streams.num.standby.replicas = 0 group.streams.session.timeout.ms = 45000 initial.broker.registration.timeout.ms = 60000 inter.broker.listener.name = SASL_PLAINTEXT internal.metadata.delete.delay.millis = 60000 internal.metadata.log.segment.bytes = null internal.metadata.max.batch.size.in.bytes = 8388608 internal.metadata.max.fetch.size.in.bytes = 8388608 kafka.metrics.polling.interval.secs = 10 kafka.metrics.reporters = [] leader.imbalance.check.interval.seconds = 300 listener.security.protocol.map = SASL_PLAINTEXT:SASL_PLAINTEXT,CONTROLLER:PLAINTEXT listeners = SASL_PLAINTEXT://127.0.0.1:48261,CONTROLLER://127.0.0.1:44521 log.cleaner.backoff.ms = 15000 log.cleaner.dedupe.buffer.size = 134217728 log.cleaner.delete.retention.ms = 86400000 log.cleaner.enable = true log.cleaner.io.buffer.load.factor = 0.9 log.cleaner.io.buffer.size = 524288 log.cleaner.io.max.bytes.per.second = 1.7976931348623157E308 log.cleaner.max.compaction.lag.ms = 9223372036854775807 log.cleaner.min.cleanable.ratio = 0.5 log.cleaner.min.compaction.lag.ms = 0 log.cleaner.threads = 1 log.cleanup.policy = [delete] log.dir = /tmp/kafka-logs log.dir.failure.timeout.ms = 30000 log.dirs = /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed log.flush.interval.messages = 9223372036854775807 log.flush.interval.ms = null log.flush.offset.checkpoint.interval.ms = 60000 log.flush.scheduler.interval.ms = 9223372036854775807 log.flush.start.offset.checkpoint.interval.ms = 60000 log.index.interval.bytes = 4096 log.index.size.max.bytes = 10485760 log.initial.task.delay.ms = 30000 log.local.retention.bytes = -2 log.local.retention.ms = -2 log.message.timestamp.after.max.ms = 3600000 log.message.timestamp.before.max.ms = 9223372036854775807 log.message.timestamp.type = CreateTime log.preallocate = false log.retention.bytes = -1 log.retention.check.interval.ms = 300000 log.retention.hours = 168 log.retention.minutes = null log.retention.ms = null log.roll.hours = 168 log.roll.jitter.hours = 0 log.roll.jitter.ms = null log.roll.ms = null log.segment.bytes = 1073741824 log.segment.delete.delay.ms = 60000 max.connection.creation.rate = 2147483647 max.connections = 2147483647 max.connections.per.ip = 2147483647 max.connections.per.ip.overrides = max.incremental.fetch.session.cache.slots = 1000 max.request.partition.size.limit = 2000 message.max.bytes = 1048588 metadata.log.dir = null metadata.log.max.record.bytes.between.snapshots = 20971520 metadata.log.max.snapshot.interval.ms = 3600000 metadata.log.segment.bytes = 1073741824 metadata.log.segment.ms = 604800000 metadata.max.idle.interval.ms = 500 metadata.max.retention.bytes = 104857600 metadata.max.retention.ms = 604800000 metric.reporters = [org.apache.kafka.common.metrics.JmxReporter] metrics.num.samples = 2 metrics.recording.level = INFO metrics.sample.window.ms = 30000 min.insync.replicas = 1 node.id = 0 num.io.threads = 8 num.network.threads = 3 num.partitions = 1 num.recovery.threads.per.data.dir = 2 num.replica.alter.log.dirs.threads = null num.replica.fetchers = 1 offset.metadata.max.bytes = 4096 offsets.commit.timeout.ms = 5000 offsets.load.buffer.size = 5242880 offsets.retention.check.interval.ms = 600000 offsets.retention.minutes = 10080 offsets.topic.compression.codec = 0 offsets.topic.num.partitions = 50 offsets.topic.replication.factor = 1 offsets.topic.segment.bytes = 104857600 principal.builder.class = class org.apache.kafka.common.security.authenticator.DefaultKafkaPrincipalBuilder process.roles = [broker, controller] producer.id.expiration.check.interval.ms = 600000 producer.id.expiration.ms = 86400000 producer.purgatory.purge.interval.requests = 1000 queued.max.request.bytes = -1 queued.max.requests = 500 quota.window.num = 11 quota.window.size.seconds = 1 remote.fetch.max.wait.ms = 500 remote.list.offsets.request.timeout.ms = 30000 remote.log.index.file.cache.total.size.bytes = 1073741824 remote.log.manager.copier.thread.pool.size = 10 remote.log.manager.copy.max.bytes.per.second = 9223372036854775807 remote.log.manager.copy.quota.window.num = 11 remote.log.manager.copy.quota.window.size.seconds = 1 remote.log.manager.expiration.thread.pool.size = 10 remote.log.manager.fetch.max.bytes.per.second = 9223372036854775807 remote.log.manager.fetch.quota.window.num = 11 remote.log.manager.fetch.quota.window.size.seconds = 1 remote.log.manager.task.interval.ms = 30000 remote.log.manager.task.retry.backoff.max.ms = 30000 remote.log.manager.task.retry.backoff.ms = 500 remote.log.manager.task.retry.jitter = 0.2 remote.log.manager.thread.pool.size = 2 remote.log.metadata.custom.metadata.max.bytes = 128 remote.log.metadata.manager.class.name = org.apache.kafka.server.log.remote.metadata.storage.TopicBasedRemoteLogMetadataManager remote.log.metadata.manager.class.path = null remote.log.metadata.manager.impl.prefix = rlmm.config. remote.log.metadata.manager.listener.name = null remote.log.reader.max.pending.tasks = 100 remote.log.reader.threads = 10 remote.log.storage.manager.class.name = null remote.log.storage.manager.class.path = null remote.log.storage.manager.impl.prefix = rsm.config. remote.log.storage.system.enable = false replica.fetch.backoff.ms = 1000 replica.fetch.max.bytes = 1048576 replica.fetch.min.bytes = 1 replica.fetch.response.max.bytes = 10485760 replica.fetch.wait.max.ms = 500 replica.high.watermark.checkpoint.interval.ms = 5000 replica.lag.time.max.ms = 30000 replica.selector.class = null replica.socket.receive.buffer.bytes = 65536 replica.socket.timeout.ms = 30000 replication.quota.window.num = 11 replication.quota.window.size.seconds = 1 request.timeout.ms = 30000 sasl.client.callback.handler.class = null sasl.enabled.mechanisms = [OAUTHBEARER] sasl.jaas.config = null sasl.kerberos.kinit.cmd = /usr/bin/kinit sasl.kerberos.min.time.before.relogin = 60000 sasl.kerberos.principal.to.local.rules = [DEFAULT] sasl.kerberos.service.name = null sasl.kerberos.ticket.renew.jitter = 0.05 sasl.kerberos.ticket.renew.window.factor = 0.8 sasl.login.callback.handler.class = null sasl.login.class = null sasl.login.connect.timeout.ms = null sasl.login.read.timeout.ms = null sasl.login.refresh.buffer.seconds = 300 sasl.login.refresh.min.period.seconds = 60 sasl.login.refresh.window.factor = 0.8 sasl.login.refresh.window.jitter = 0.05 sasl.login.retry.backoff.max.ms = 10000 sasl.login.retry.backoff.ms = 100 sasl.mechanism.controller.protocol = GSSAPI sasl.mechanism.inter.broker.protocol = OAUTHBEARER sasl.oauthbearer.assertion.algorithm = RS256 sasl.oauthbearer.assertion.claim.aud = null sasl.oauthbearer.assertion.claim.exp.seconds = 300 sasl.oauthbearer.assertion.claim.iss = null sasl.oauthbearer.assertion.claim.jti.include = false sasl.oauthbearer.assertion.claim.nbf.seconds = 60 sasl.oauthbearer.assertion.claim.sub = null sasl.oauthbearer.assertion.file = null sasl.oauthbearer.assertion.private.key.file = null sasl.oauthbearer.assertion.private.key.passphrase = null sasl.oauthbearer.assertion.template.file = null sasl.oauthbearer.client.credentials.client.id = valid-broker sasl.oauthbearer.client.credentials.client.secret = [hidden] sasl.oauthbearer.clock.skew.seconds = 30 sasl.oauthbearer.expected.audience = [kafka-broker] sasl.oauthbearer.expected.issuer = https://mock-idp.example.com sasl.oauthbearer.jwks.endpoint.refresh.ms = 3600000 sasl.oauthbearer.jwks.endpoint.retry.backoff.max.ms = 10000 sasl.oauthbearer.jwks.endpoint.retry.backoff.ms = 100 sasl.oauthbearer.jwks.endpoint.url = null sasl.oauthbearer.jwt.retriever.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtRetriever sasl.oauthbearer.jwt.validator.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator sasl.oauthbearer.scope = null sasl.oauthbearer.scope.claim.name = scope sasl.oauthbearer.sub.claim.name = sub sasl.oauthbearer.token.endpoint.url = http://127.0.0.1:46139/token sasl.server.callback.handler.class = null sasl.server.max.receive.size = 524288 security.inter.broker.protocol = PLAINTEXT security.providers = null server.max.startup.time.ms = 9223372036854775807 share.coordinator.append.linger.ms = 5 share.coordinator.cold.partition.snapshot.interval.ms = 300000 share.coordinator.load.buffer.size = 5242880 share.coordinator.snapshot.update.records.per.snapshot = 500 share.coordinator.state.topic.compression.codec = 0 share.coordinator.state.topic.min.isr = 2 share.coordinator.state.topic.num.partitions = 50 share.coordinator.state.topic.prune.interval.ms = 300000 share.coordinator.state.topic.replication.factor = 3 share.coordinator.state.topic.segment.bytes = 104857600 share.coordinator.threads = 1 share.coordinator.write.timeout.ms = 5000 share.fetch.purgatory.purge.interval.requests = 1000 socket.connection.setup.timeout.max.ms = 30000 socket.connection.setup.timeout.ms = 10000 socket.listen.backlog.size = 50 socket.receive.buffer.bytes = 102400 socket.request.max.bytes = 104857600 socket.send.buffer.bytes = 102400 ssl.allow.dn.changes = false ssl.allow.san.changes = false ssl.cipher.suites = [] ssl.client.auth = none ssl.enabled.protocols = [TLSv1.2, TLSv1.3] ssl.endpoint.identification.algorithm = https ssl.engine.factory.class = null ssl.key.password = null ssl.keymanager.algorithm = SunX509 ssl.keystore.certificate.chain = null ssl.keystore.key = null ssl.keystore.location = null ssl.keystore.password = null ssl.keystore.type = JKS ssl.principal.mapping.rules = DEFAULT ssl.protocol = TLSv1.3 ssl.provider = null ssl.secure.random.implementation = null ssl.trustmanager.algorithm = PKIX ssl.truststore.certificates = null ssl.truststore.location = null ssl.truststore.password = null ssl.truststore.type = JKS telemetry.max.bytes = 1048576 transaction.abort.timed.out.transaction.cleanup.interval.ms = 10000 transaction.max.timeout.ms = 900000 transaction.partition.verification.enable = true transaction.remove.expired.transaction.cleanup.interval.ms = 3600000 transaction.state.log.load.buffer.size = 5242880 transaction.state.log.min.isr = 1 transaction.state.log.num.partitions = 50 transaction.state.log.replication.factor = 1 transaction.state.log.segment.bytes = 104857600 transaction.two.phase.commit.enable = false transactional.id.expiration.ms = 604800000 unclean.leader.election.enable = false unclean.leader.election.interval.ms = 300000 unstable.api.versions.enable = false unstable.feature.versions.enable = false (org.apache.kafka.common.config.AbstractConfig) [2026-07-11 04:18:22,827] INFO [BrokerServer id=0] Waiting for controller quorum voters future (kafka.server.BrokerServer) [2026-07-11 04:18:22,827] INFO [BrokerServer id=0] Finished waiting for controller quorum voters future (kafka.server.BrokerServer) [2026-07-11 04:18:22,828] INFO [broker-0-to-controller-forwarding-channel-manager]: Starting (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,828] INFO [broker-0-to-controller-forwarding-channel-manager]: Recorded new KRaft controller, from now on will use node 127.0.0.1:44521 (id: 0 rack: null isFenced: false) (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,832] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing DynamicClientQuotaPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,833] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing DynamicTopicClusterQuotaPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,834] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing ScramPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,834] INFO [client-metrics-reaper]: Starting (org.apache.kafka.server.util.timer.SystemTimerReaper$Reaper) [2026-07-11 04:18:22,834] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing DelegationTokenPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,835] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing ControllerMetadataMetricsPublisher with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,835] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing AclPublisher controller id=0 with a snapshot at offset 7 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:22,845] INFO Updated connection-accept-rate max connection creation rate to 2147483647 (kafka.network.ConnectionQuotas) [2026-07-11 04:18:22,867] INFO JWKS validation key refresh thread started with a refresh interval of 3600000 ms (org.apache.kafka.common.security.oauthbearer.internals.secured.RefreshingHttpsJwks) [2026-07-11 04:18:22,893] INFO [ControllerRegistrationManager id=0 incarnation=MD6Y3zGFRA-XGJQ0VwHchA] Our registration has been persisted to the metadata log. (kafka.server.ControllerRegistrationManager) [2026-07-11 04:18:22,894] INFO [ControllerRegistrationManager id=0 incarnation=MD6Y3zGFRA-XGJQ0VwHchA] RegistrationResponseHandler: controller acknowledged ControllerRegistrationRequest. (kafka.server.ControllerRegistrationManager) [2026-07-11 04:18:22,938] INFO Successfully logged in. (org.apache.kafka.common.security.authenticator.AbstractLogin) [2026-07-11 04:18:22,943] INFO [SocketServer listenerType=BROKER, nodeId=0] Created data-plane acceptor and processors for endpoint : ListenerName(SASL_PLAINTEXT) (kafka.network.SocketServer) [2026-07-11 04:18:22,945] INFO [broker-0-to-controller-alter-partition-channel-manager]: Starting (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,946] INFO [broker-0-to-controller-alter-partition-channel-manager]: Recorded new KRaft controller, from now on will use node 127.0.0.1:44521 (id: 0 rack: null isFenced: false) (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,951] INFO Successfully logged in. (org.apache.kafka.common.security.oauthbearer.internals.expiring.ExpiringCredentialRefreshingLogin) [2026-07-11 04:18:22,952] INFO [Principal=:variant-user]: Expiring credential re-login thread started. (org.apache.kafka.common.security.oauthbearer.internals.expiring.ExpiringCredentialRefreshingLogin) [2026-07-11 04:18:22,952] INFO [Principal=variant-user]: Expiring credential valid from 2026-07-11T04:17:22.000+0000 to 2026-07-11T05:18:22.000+0000 (org.apache.kafka.common.security.oauthbearer.internals.expiring.ExpiringCredentialRefreshingLogin) [2026-07-11 04:18:22,953] INFO [Principal=:variant-user]: Expiring credential re-login sleeping until: 2026-07-11T05:07:35.478+0000 (org.apache.kafka.common.security.oauthbearer.internals.expiring.ExpiringCredentialRefreshingLogin) [2026-07-11 04:18:22,956] INFO [broker-0-to-controller-directory-assignments-channel-manager]: Starting (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,956] INFO [broker-0-to-controller-directory-assignments-channel-manager]: Recorded new KRaft controller, from now on will use node 127.0.0.1:44521 (id: 0 rack: null isFenced: false) (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:22,965] INFO [ExpirationReaper-0-Produce]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,965] INFO [ExpirationReaper-0-Fetch]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,966] INFO [ExpirationReaper-0-DeleteRecords]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,966] INFO [ExpirationReaper-0-RemoteFetch]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,967] INFO [ExpirationReaper-0-RemoteListOffsets]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,967] INFO [ExpirationReaper-0-ShareFetch]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:22,975] INFO [share-coordinator-reaper]: Starting (org.apache.kafka.server.util.timer.SystemTimerReaper$Reaper) [2026-07-11 04:18:22,985] INFO [share-coordinator-event-processor-0]: Starting (org.apache.kafka.coordinator.common.runtime.MultiThreadedEventProcessor$EventProcessorThread) [2026-07-11 04:18:22,989] INFO [persister-state-manager-reaper]: Starting (org.apache.kafka.server.util.timer.SystemTimerReaper$Reaper) [2026-07-11 04:18:22,989] INFO [PersisterStateManager]: Starting (org.apache.kafka.server.share.persister.PersisterStateManager$SendThread) [2026-07-11 04:18:22,989] INFO [group-coordinator-reaper]: Starting (org.apache.kafka.server.util.timer.SystemTimerReaper$Reaper) [2026-07-11 04:18:22,996] INFO [group-coordinator-event-processor-0]: Starting (org.apache.kafka.coordinator.common.runtime.MultiThreadedEventProcessor$EventProcessorThread) [2026-07-11 04:18:22,996] INFO [group-coordinator-event-processor-1]: Starting (org.apache.kafka.coordinator.common.runtime.MultiThreadedEventProcessor$EventProcessorThread) [2026-07-11 04:18:22,996] INFO [group-coordinator-event-processor-2]: Starting (org.apache.kafka.coordinator.common.runtime.MultiThreadedEventProcessor$EventProcessorThread) [2026-07-11 04:18:22,996] INFO [group-coordinator-event-processor-3]: Starting (org.apache.kafka.coordinator.common.runtime.MultiThreadedEventProcessor$EventProcessorThread) [2026-07-11 04:18:23,008] INFO Unable to read the broker epoch in /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed. (kafka.log.LogManager) [2026-07-11 04:18:23,009] INFO [broker-0-to-controller-heartbeat-channel-manager]: Starting (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:23,009] INFO [broker-0-to-controller-heartbeat-channel-manager]: Recorded new KRaft controller, from now on will use node 127.0.0.1:44521 (id: 0 rack: null isFenced: false) (kafka.server.NodeToControllerRequestThread) [2026-07-11 04:18:23,011] INFO [BrokerLifecycleManager id=0] Incarnation t3-MxuPZQGicrfGQJ2Hxog of broker 0 in cluster 4-79SABORtqJ--0mFjx_vA is now STARTING. (kafka.server.BrokerLifecycleManager) [2026-07-11 04:18:23,017] INFO [share-group-lock-timeout-reaper]: Starting (org.apache.kafka.server.util.timer.SystemTimerReaper$Reaper) [2026-07-11 04:18:23,025] INFO [ExpirationReaper-0-AlterAcls]: Starting (org.apache.kafka.server.purgatory.DelayedOperationPurgatory$ExpiredOperationReaper) [2026-07-11 04:18:23,036] INFO [BrokerServer id=0] Waiting for the broker metadata publishers to be installed (kafka.server.BrokerServer) [2026-07-11 04:18:23,036] INFO [BrokerServer id=0] Finished waiting for the broker metadata publishers to be installed (kafka.server.BrokerServer) [2026-07-11 04:18:23,036] INFO [BrokerServer id=0] Waiting for the controller to acknowledge that we are caught up (kafka.server.BrokerServer) [2026-07-11 04:18:23,036] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing MetadataVersionPublisher(id=0) with a snapshot at offset 8 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:23,037] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing BrokerMetadataPublisher with a snapshot at offset 8 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:23,039] INFO [BrokerMetadataPublisher id=0] Publishing initial metadata at offset OffsetAndEpoch[offset=8, epoch=1] with metadata.version Optional[4.1-IV1]. (kafka.server.metadata.BrokerMetadataPublisher) [2026-07-11 04:18:23,039] INFO Loading logs from log dirs ArrayBuffer(/data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed) (kafka.log.LogManager) [2026-07-11 04:18:23,041] INFO No logs found to be loaded in /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed (kafka.log.LogManager) [2026-07-11 04:18:23,047] INFO Loaded 0 logs in 7ms (kafka.log.LogManager) [2026-07-11 04:18:23,048] INFO Starting log cleanup with a period of 300000 ms. (kafka.log.LogManager) [2026-07-11 04:18:23,048] INFO Starting log flusher with a default period of 9223372036854775807 ms. (kafka.log.LogManager) [2026-07-11 04:18:23,052] INFO [BrokerLifecycleManager id=0] Successfully registered broker 0 with broker epoch 9 (kafka.server.BrokerLifecycleManager) [2026-07-11 04:18:23,071] INFO [LogDirFailureHandler]: Starting (kafka.server.ReplicaManager$LogDirFailureHandler) [2026-07-11 04:18:23,072] INFO [AddPartitionsToTxnSenderThread-0]: Starting (org.apache.kafka.server.transaction.AddPartitionsToTxnManager) [2026-07-11 04:18:23,073] INFO [GroupCoordinator id=0] Starting up. (org.apache.kafka.coordinator.group.GroupCoordinatorService) [2026-07-11 04:18:23,074] INFO [GroupCoordinator id=0] Startup complete. (org.apache.kafka.coordinator.group.GroupCoordinatorService) [2026-07-11 04:18:23,074] INFO [TransactionCoordinator id=0] Starting up. (kafka.coordinator.transaction.TransactionCoordinator) [2026-07-11 04:18:23,075] INFO [TxnMarkerSenderThread-0]: Starting (kafka.coordinator.transaction.TransactionMarkerChannelManager) [2026-07-11 04:18:23,075] INFO [TransactionCoordinator id=0] Startup complete. (kafka.coordinator.transaction.TransactionCoordinator) [2026-07-11 04:18:23,075] INFO [ShareCoordinator id=0] Starting up. (org.apache.kafka.coordinator.share.ShareCoordinatorService) [2026-07-11 04:18:23,075] INFO [ShareCoordinator id=0] Startup complete. (org.apache.kafka.coordinator.share.ShareCoordinatorService) [2026-07-11 04:18:23,079] INFO [DynamicConfigPublisher broker id=0] Updating cluster configuration : min.insync.replicas -> 1 (kafka.server.metadata.DynamicConfigPublisher) [2026-07-11 04:18:23,080] INFO KafkaConfig values: add.partitions.to.txn.retry.backoff.max.ms = 100 add.partitions.to.txn.retry.backoff.ms = 20 advertised.listeners = SASL_PLAINTEXT://127.0.0.1:48261 alter.config.policy.class.name = null alter.log.dirs.replication.quota.window.num = 11 alter.log.dirs.replication.quota.window.size.seconds = 1 authorizer.class.name = auto.create.topics.enable = true auto.leader.rebalance.enable = true background.threads = 10 broker.heartbeat.interval.ms = 2000 broker.id = 0 broker.rack = null broker.session.timeout.ms = 9000 client.quota.callback.class = null compression.gzip.level = -1 compression.lz4.level = 9 compression.type = producer compression.zstd.level = 3 connection.failed.authentication.delay.ms = 100 connections.max.idle.ms = 600000 connections.max.reauth.ms = 0 controlled.shutdown.enable = true controller.listener.names = CONTROLLER controller.performance.always.log.threshold.ms = 2000 controller.performance.sample.period.ms = 60000 controller.quorum.append.linger.ms = 25 controller.quorum.bootstrap.servers = [] controller.quorum.election.backoff.max.ms = 1000 controller.quorum.election.timeout.ms = 1000 controller.quorum.fetch.timeout.ms = 2000 controller.quorum.request.timeout.ms = 2000 controller.quorum.retry.backoff.ms = 20 controller.quorum.voters = [0@127.0.0.1:44521] controller.quota.window.num = 11 controller.quota.window.size.seconds = 1 controller.socket.timeout.ms = 30000 create.topic.policy.class.name = null default.replication.factor = 1 delegation.token.expiry.check.interval.ms = 3600000 delegation.token.expiry.time.ms = 86400000 delegation.token.max.lifetime.ms = 604800000 delegation.token.secret.key = null delete.records.purgatory.purge.interval.requests = 1 delete.topic.enable = true early.start.listeners = null fetch.max.bytes = 57671680 fetch.purgatory.purge.interval.requests = 1000 group.consumer.assignors = [uniform, range] group.consumer.heartbeat.interval.ms = 5000 group.consumer.max.heartbeat.interval.ms = 15000 group.consumer.max.session.timeout.ms = 60000 group.consumer.max.size = 2147483647 group.consumer.migration.policy = bidirectional group.consumer.min.heartbeat.interval.ms = 5000 group.consumer.min.session.timeout.ms = 45000 group.consumer.regex.refresh.interval.ms = 600000 group.consumer.session.timeout.ms = 45000 group.coordinator.append.linger.ms = 5 group.coordinator.rebalance.protocols = [classic, consumer, streams] group.coordinator.threads = 4 group.initial.rebalance.delay.ms = 3000 group.max.session.timeout.ms = 1800000 group.max.size = 2147483647 group.min.session.timeout.ms = 6000 group.share.assignors = [simple] group.share.delivery.count.limit = 5 group.share.enable = false group.share.heartbeat.interval.ms = 5000 group.share.max.heartbeat.interval.ms = 15000 group.share.max.record.lock.duration.ms = 60000 group.share.max.session.timeout.ms = 60000 group.share.max.share.sessions = 2000 group.share.max.size = 200 group.share.min.heartbeat.interval.ms = 5000 group.share.min.record.lock.duration.ms = 15000 group.share.min.session.timeout.ms = 45000 group.share.partition.max.record.locks = 2000 group.share.persister.class.name = org.apache.kafka.server.share.persister.DefaultStatePersister group.share.record.lock.duration.ms = 30000 group.share.session.timeout.ms = 45000 group.streams.heartbeat.interval.ms = 5000 group.streams.max.heartbeat.interval.ms = 15000 group.streams.max.session.timeout.ms = 60000 group.streams.max.size = 2147483647 group.streams.max.standby.replicas = 2 group.streams.min.heartbeat.interval.ms = 5000 group.streams.min.session.timeout.ms = 45000 group.streams.num.standby.replicas = 0 group.streams.session.timeout.ms = 45000 initial.broker.registration.timeout.ms = 60000 inter.broker.listener.name = SASL_PLAINTEXT internal.metadata.delete.delay.millis = 60000 internal.metadata.log.segment.bytes = null internal.metadata.max.batch.size.in.bytes = 8388608 internal.metadata.max.fetch.size.in.bytes = 8388608 kafka.metrics.polling.interval.secs = 10 kafka.metrics.reporters = [] leader.imbalance.check.interval.seconds = 300 listener.security.protocol.map = SASL_PLAINTEXT:SASL_PLAINTEXT,CONTROLLER:PLAINTEXT listeners = SASL_PLAINTEXT://127.0.0.1:48261,CONTROLLER://127.0.0.1:44521 log.cleaner.backoff.ms = 15000 log.cleaner.dedupe.buffer.size = 134217728 log.cleaner.delete.retention.ms = 86400000 log.cleaner.enable = true log.cleaner.io.buffer.load.factor = 0.9 log.cleaner.io.buffer.size = 524288 log.cleaner.io.max.bytes.per.second = 1.7976931348623157E308 log.cleaner.max.compaction.lag.ms = 9223372036854775807 log.cleaner.min.cleanable.ratio = 0.5 log.cleaner.min.compaction.lag.ms = 0 log.cleaner.threads = 1 log.cleanup.policy = [delete] log.dir = /tmp/kafka-logs log.dir.failure.timeout.ms = 30000 log.dirs = /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed log.flush.interval.messages = 9223372036854775807 log.flush.interval.ms = null log.flush.offset.checkpoint.interval.ms = 60000 log.flush.scheduler.interval.ms = 9223372036854775807 log.flush.start.offset.checkpoint.interval.ms = 60000 log.index.interval.bytes = 4096 log.index.size.max.bytes = 10485760 log.initial.task.delay.ms = 30000 log.local.retention.bytes = -2 log.local.retention.ms = -2 log.message.timestamp.after.max.ms = 3600000 log.message.timestamp.before.max.ms = 9223372036854775807 log.message.timestamp.type = CreateTime log.preallocate = false log.retention.bytes = -1 log.retention.check.interval.ms = 300000 log.retention.hours = 168 log.retention.minutes = null log.retention.ms = null log.roll.hours = 168 log.roll.jitter.hours = 0 log.roll.jitter.ms = null log.roll.ms = null log.segment.bytes = 1073741824 log.segment.delete.delay.ms = 60000 max.connection.creation.rate = 2147483647 max.connections = 2147483647 max.connections.per.ip = 2147483647 max.connections.per.ip.overrides = max.incremental.fetch.session.cache.slots = 1000 max.request.partition.size.limit = 2000 message.max.bytes = 1048588 metadata.log.dir = null metadata.log.max.record.bytes.between.snapshots = 20971520 metadata.log.max.snapshot.interval.ms = 3600000 metadata.log.segment.bytes = 1073741824 metadata.log.segment.ms = 604800000 metadata.max.idle.interval.ms = 500 metadata.max.retention.bytes = 104857600 metadata.max.retention.ms = 604800000 metric.reporters = [org.apache.kafka.common.metrics.JmxReporter] metrics.num.samples = 2 metrics.recording.level = INFO metrics.sample.window.ms = 30000 min.insync.replicas = 1 node.id = 0 num.io.threads = 8 num.network.threads = 3 num.partitions = 1 num.recovery.threads.per.data.dir = 2 num.replica.alter.log.dirs.threads = null num.replica.fetchers = 1 offset.metadata.max.bytes = 4096 offsets.commit.timeout.ms = 5000 offsets.load.buffer.size = 5242880 offsets.retention.check.interval.ms = 600000 offsets.retention.minutes = 10080 offsets.topic.compression.codec = 0 offsets.topic.num.partitions = 50 offsets.topic.replication.factor = 1 offsets.topic.segment.bytes = 104857600 principal.builder.class = class org.apache.kafka.common.security.authenticator.DefaultKafkaPrincipalBuilder process.roles = [broker, controller] producer.id.expiration.check.interval.ms = 600000 producer.id.expiration.ms = 86400000 producer.purgatory.purge.interval.requests = 1000 queued.max.request.bytes = -1 queued.max.requests = 500 quota.window.num = 11 quota.window.size.seconds = 1 remote.fetch.max.wait.ms = 500 remote.list.offsets.request.timeout.ms = 30000 remote.log.index.file.cache.total.size.bytes = 1073741824 remote.log.manager.copier.thread.pool.size = 10 remote.log.manager.copy.max.bytes.per.second = 9223372036854775807 remote.log.manager.copy.quota.window.num = 11 remote.log.manager.copy.quota.window.size.seconds = 1 remote.log.manager.expiration.thread.pool.size = 10 remote.log.manager.fetch.max.bytes.per.second = 9223372036854775807 remote.log.manager.fetch.quota.window.num = 11 remote.log.manager.fetch.quota.window.size.seconds = 1 remote.log.manager.task.interval.ms = 30000 remote.log.manager.task.retry.backoff.max.ms = 30000 remote.log.manager.task.retry.backoff.ms = 500 remote.log.manager.task.retry.jitter = 0.2 remote.log.manager.thread.pool.size = 2 remote.log.metadata.custom.metadata.max.bytes = 128 remote.log.metadata.manager.class.name = org.apache.kafka.server.log.remote.metadata.storage.TopicBasedRemoteLogMetadataManager remote.log.metadata.manager.class.path = null remote.log.metadata.manager.impl.prefix = rlmm.config. remote.log.metadata.manager.listener.name = null remote.log.reader.max.pending.tasks = 100 remote.log.reader.threads = 10 remote.log.storage.manager.class.name = null remote.log.storage.manager.class.path = null remote.log.storage.manager.impl.prefix = rsm.config. remote.log.storage.system.enable = false replica.fetch.backoff.ms = 1000 replica.fetch.max.bytes = 1048576 replica.fetch.min.bytes = 1 replica.fetch.response.max.bytes = 10485760 replica.fetch.wait.max.ms = 500 replica.high.watermark.checkpoint.interval.ms = 5000 replica.lag.time.max.ms = 30000 replica.selector.class = null replica.socket.receive.buffer.bytes = 65536 replica.socket.timeout.ms = 30000 replication.quota.window.num = 11 replication.quota.window.size.seconds = 1 request.timeout.ms = 30000 sasl.client.callback.handler.class = null sasl.enabled.mechanisms = [OAUTHBEARER] sasl.jaas.config = null sasl.kerberos.kinit.cmd = /usr/bin/kinit sasl.kerberos.min.time.before.relogin = 60000 sasl.kerberos.principal.to.local.rules = [DEFAULT] sasl.kerberos.service.name = null sasl.kerberos.ticket.renew.jitter = 0.05 sasl.kerberos.ticket.renew.window.factor = 0.8 sasl.login.callback.handler.class = null sasl.login.class = null sasl.login.connect.timeout.ms = null sasl.login.read.timeout.ms = null sasl.login.refresh.buffer.seconds = 300 sasl.login.refresh.min.period.seconds = 60 sasl.login.refresh.window.factor = 0.8 sasl.login.refresh.window.jitter = 0.05 sasl.login.retry.backoff.max.ms = 10000 sasl.login.retry.backoff.ms = 100 sasl.mechanism.controller.protocol = GSSAPI sasl.mechanism.inter.broker.protocol = OAUTHBEARER sasl.oauthbearer.assertion.algorithm = RS256 sasl.oauthbearer.assertion.claim.aud = null sasl.oauthbearer.assertion.claim.exp.seconds = 300 sasl.oauthbearer.assertion.claim.iss = null sasl.oauthbearer.assertion.claim.jti.include = false sasl.oauthbearer.assertion.claim.nbf.seconds = 60 sasl.oauthbearer.assertion.claim.sub = null sasl.oauthbearer.assertion.file = null sasl.oauthbearer.assertion.private.key.file = null sasl.oauthbearer.assertion.private.key.passphrase = null sasl.oauthbearer.assertion.template.file = null sasl.oauthbearer.client.credentials.client.id = valid-broker sasl.oauthbearer.client.credentials.client.secret = [hidden] sasl.oauthbearer.clock.skew.seconds = 30 sasl.oauthbearer.expected.audience = [kafka-broker] sasl.oauthbearer.expected.issuer = https://mock-idp.example.com sasl.oauthbearer.jwks.endpoint.refresh.ms = 3600000 sasl.oauthbearer.jwks.endpoint.retry.backoff.max.ms = 10000 sasl.oauthbearer.jwks.endpoint.retry.backoff.ms = 100 sasl.oauthbearer.jwks.endpoint.url = null sasl.oauthbearer.jwt.retriever.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtRetriever sasl.oauthbearer.jwt.validator.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator sasl.oauthbearer.scope = null sasl.oauthbearer.scope.claim.name = scope sasl.oauthbearer.sub.claim.name = sub sasl.oauthbearer.token.endpoint.url = http://127.0.0.1:46139/token sasl.server.callback.handler.class = null sasl.server.max.receive.size = 524288 security.inter.broker.protocol = PLAINTEXT security.providers = null server.max.startup.time.ms = 9223372036854775807 share.coordinator.append.linger.ms = 5 share.coordinator.cold.partition.snapshot.interval.ms = 300000 share.coordinator.load.buffer.size = 5242880 share.coordinator.snapshot.update.records.per.snapshot = 500 share.coordinator.state.topic.compression.codec = 0 share.coordinator.state.topic.min.isr = 2 share.coordinator.state.topic.num.partitions = 50 share.coordinator.state.topic.prune.interval.ms = 300000 share.coordinator.state.topic.replication.factor = 3 share.coordinator.state.topic.segment.bytes = 104857600 share.coordinator.threads = 1 share.coordinator.write.timeout.ms = 5000 share.fetch.purgatory.purge.interval.requests = 1000 socket.connection.setup.timeout.max.ms = 30000 socket.connection.setup.timeout.ms = 10000 socket.listen.backlog.size = 50 socket.receive.buffer.bytes = 102400 socket.request.max.bytes = 104857600 socket.send.buffer.bytes = 102400 ssl.allow.dn.changes = false ssl.allow.san.changes = false ssl.cipher.suites = [] ssl.client.auth = none ssl.enabled.protocols = [TLSv1.2, TLSv1.3] ssl.endpoint.identification.algorithm = https ssl.engine.factory.class = null ssl.key.password = null ssl.keymanager.algorithm = SunX509 ssl.keystore.certificate.chain = null ssl.keystore.key = null ssl.keystore.location = null ssl.keystore.password = null ssl.keystore.type = JKS ssl.principal.mapping.rules = DEFAULT ssl.protocol = TLSv1.3 ssl.provider = null ssl.secure.random.implementation = null ssl.trustmanager.algorithm = PKIX ssl.truststore.certificates = null ssl.truststore.location = null ssl.truststore.password = null ssl.truststore.type = JKS telemetry.max.bytes = 1048576 transaction.abort.timed.out.transaction.cleanup.interval.ms = 10000 transaction.max.timeout.ms = 900000 transaction.partition.verification.enable = true transaction.remove.expired.transaction.cleanup.interval.ms = 3600000 transaction.state.log.load.buffer.size = 5242880 transaction.state.log.min.isr = 1 transaction.state.log.num.partitions = 50 transaction.state.log.replication.factor = 1 transaction.state.log.segment.bytes = 104857600 transaction.two.phase.commit.enable = false transactional.id.expiration.ms = 604800000 unclean.leader.election.enable = false unclean.leader.election.interval.ms = 300000 unstable.api.versions.enable = false unstable.feature.versions.enable = false (org.apache.kafka.common.config.AbstractConfig) [2026-07-11 04:18:23,085] INFO [MetadataLoader id=0] InitializeNewPublishers: initializing BrokerRegistrationTracker(id=0) with a snapshot at offset 8 (org.apache.kafka.image.loader.MetadataLoader) [2026-07-11 04:18:23,094] INFO [BrokerLifecycleManager id=0] The broker has caught up. Transitioning from STARTING to RECOVERY. (kafka.server.BrokerLifecycleManager) [2026-07-11 04:18:23,094] INFO [BrokerServer id=0] Finished waiting for the controller to acknowledge that we are caught up (kafka.server.BrokerServer) [2026-07-11 04:18:23,094] INFO [BrokerServer id=0] Waiting for the initial broker metadata update to be published (kafka.server.BrokerServer) [2026-07-11 04:18:23,095] INFO [BrokerServer id=0] Finished waiting for the initial broker metadata update to be published (kafka.server.BrokerServer) [2026-07-11 04:18:23,095] INFO KafkaConfig values: add.partitions.to.txn.retry.backoff.max.ms = 100 add.partitions.to.txn.retry.backoff.ms = 20 advertised.listeners = SASL_PLAINTEXT://127.0.0.1:48261 alter.config.policy.class.name = null alter.log.dirs.replication.quota.window.num = 11 alter.log.dirs.replication.quota.window.size.seconds = 1 authorizer.class.name = auto.create.topics.enable = true auto.leader.rebalance.enable = true background.threads = 10 broker.heartbeat.interval.ms = 2000 broker.id = 0 broker.rack = null broker.session.timeout.ms = 9000 client.quota.callback.class = null compression.gzip.level = -1 compression.lz4.level = 9 compression.type = producer compression.zstd.level = 3 connection.failed.authentication.delay.ms = 100 connections.max.idle.ms = 600000 connections.max.reauth.ms = 0 controlled.shutdown.enable = true controller.listener.names = CONTROLLER controller.performance.always.log.threshold.ms = 2000 controller.performance.sample.period.ms = 60000 controller.quorum.append.linger.ms = 25 controller.quorum.bootstrap.servers = [] controller.quorum.election.backoff.max.ms = 1000 controller.quorum.election.timeout.ms = 1000 controller.quorum.fetch.timeout.ms = 2000 controller.quorum.request.timeout.ms = 2000 controller.quorum.retry.backoff.ms = 20 controller.quorum.voters = [0@127.0.0.1:44521] controller.quota.window.num = 11 controller.quota.window.size.seconds = 1 controller.socket.timeout.ms = 30000 create.topic.policy.class.name = null default.replication.factor = 1 delegation.token.expiry.check.interval.ms = 3600000 delegation.token.expiry.time.ms = 86400000 delegation.token.max.lifetime.ms = 604800000 delegation.token.secret.key = null delete.records.purgatory.purge.interval.requests = 1 delete.topic.enable = true early.start.listeners = null fetch.max.bytes = 57671680 fetch.purgatory.purge.interval.requests = 1000 group.consumer.assignors = [uniform, range] group.consumer.heartbeat.interval.ms = 5000 group.consumer.max.heartbeat.interval.ms = 15000 group.consumer.max.session.timeout.ms = 60000 group.consumer.max.size = 2147483647 group.consumer.migration.policy = bidirectional group.consumer.min.heartbeat.interval.ms = 5000 group.consumer.min.session.timeout.ms = 45000 group.consumer.regex.refresh.interval.ms = 600000 group.consumer.session.timeout.ms = 45000 group.coordinator.append.linger.ms = 5 group.coordinator.rebalance.protocols = [classic, consumer, streams] group.coordinator.threads = 4 group.initial.rebalance.delay.ms = 3000 group.max.session.timeout.ms = 1800000 group.max.size = 2147483647 group.min.session.timeout.ms = 6000 group.share.assignors = [simple] group.share.delivery.count.limit = 5 group.share.enable = false group.share.heartbeat.interval.ms = 5000 group.share.max.heartbeat.interval.ms = 15000 group.share.max.record.lock.duration.ms = 60000 group.share.max.session.timeout.ms = 60000 group.share.max.share.sessions = 2000 group.share.max.size = 200 group.share.min.heartbeat.interval.ms = 5000 group.share.min.record.lock.duration.ms = 15000 group.share.min.session.timeout.ms = 45000 group.share.partition.max.record.locks = 2000 group.share.persister.class.name = org.apache.kafka.server.share.persister.DefaultStatePersister group.share.record.lock.duration.ms = 30000 group.share.session.timeout.ms = 45000 group.streams.heartbeat.interval.ms = 5000 group.streams.max.heartbeat.interval.ms = 15000 group.streams.max.session.timeout.ms = 60000 group.streams.max.size = 2147483647 group.streams.max.standby.replicas = 2 group.streams.min.heartbeat.interval.ms = 5000 group.streams.min.session.timeout.ms = 45000 group.streams.num.standby.replicas = 0 group.streams.session.timeout.ms = 45000 initial.broker.registration.timeout.ms = 60000 inter.broker.listener.name = SASL_PLAINTEXT internal.metadata.delete.delay.millis = 60000 internal.metadata.log.segment.bytes = null internal.metadata.max.batch.size.in.bytes = 8388608 internal.metadata.max.fetch.size.in.bytes = 8388608 kafka.metrics.polling.interval.secs = 10 kafka.metrics.reporters = [] leader.imbalance.check.interval.seconds = 300 listener.security.protocol.map = SASL_PLAINTEXT:SASL_PLAINTEXT,CONTROLLER:PLAINTEXT listeners = SASL_PLAINTEXT://127.0.0.1:48261,CONTROLLER://127.0.0.1:44521 log.cleaner.backoff.ms = 15000 log.cleaner.dedupe.buffer.size = 134217728 log.cleaner.delete.retention.ms = 86400000 log.cleaner.enable = true log.cleaner.io.buffer.load.factor = 0.9 log.cleaner.io.buffer.size = 524288 log.cleaner.io.max.bytes.per.second = 1.7976931348623157E308 log.cleaner.max.compaction.lag.ms = 9223372036854775807 log.cleaner.min.cleanable.ratio = 0.5 log.cleaner.min.compaction.lag.ms = 0 log.cleaner.threads = 1 log.cleanup.policy = [delete] log.dir = /tmp/kafka-logs log.dir.failure.timeout.ms = 30000 log.dirs = /data/pruva/runs/e9683a40-d1d1-46c8-8475-d3a9bb15dcb2/bundle/vuln_variant/artifacts/kafka-oauth-variant-20260711T041811Z-47909/data_fixed log.flush.interval.messages = 9223372036854775807 log.flush.interval.ms = null log.flush.offset.checkpoint.interval.ms = 60000 log.flush.scheduler.interval.ms = 9223372036854775807 log.flush.start.offset.checkpoint.interval.ms = 60000 log.index.interval.bytes = 4096 log.index.size.max.bytes = 10485760 log.initial.task.delay.ms = 30000 log.local.retention.bytes = -2 log.local.retention.ms = -2 log.message.timestamp.after.max.ms = 3600000 log.message.timestamp.before.max.ms = 9223372036854775807 log.message.timestamp.type = CreateTime log.preallocate = false log.retention.bytes = -1 log.retention.check.interval.ms = 300000 log.retention.hours = 168 log.retention.minutes = null log.retention.ms = null log.roll.hours = 168 log.roll.jitter.hours = 0 log.roll.jitter.ms = null log.roll.ms = null log.segment.bytes = 1073741824 log.segment.delete.delay.ms = 60000 max.connection.creation.rate = 2147483647 max.connections = 2147483647 max.connections.per.ip = 2147483647 max.connections.per.ip.overrides = max.incremental.fetch.session.cache.slots = 1000 max.request.partition.size.limit = 2000 message.max.bytes = 1048588 metadata.log.dir = null metadata.log.max.record.bytes.between.snapshots = 20971520 metadata.log.max.snapshot.interval.ms = 3600000 metadata.log.segment.bytes = 1073741824 metadata.log.segment.ms = 604800000 metadata.max.idle.interval.ms = 500 metadata.max.retention.bytes = 104857600 metadata.max.retention.ms = 604800000 metric.reporters = [org.apache.kafka.common.metrics.JmxReporter] metrics.num.samples = 2 metrics.recording.level = INFO metrics.sample.window.ms = 30000 min.insync.replicas = 1 node.id = 0 num.io.threads = 8 num.network.threads = 3 num.partitions = 1 num.recovery.threads.per.data.dir = 2 num.replica.alter.log.dirs.threads = null num.replica.fetchers = 1 offset.metadata.max.bytes = 4096 offsets.commit.timeout.ms = 5000 offsets.load.buffer.size = 5242880 offsets.retention.check.interval.ms = 600000 offsets.retention.minutes = 10080 offsets.topic.compression.codec = 0 offsets.topic.num.partitions = 50 offsets.topic.replication.factor = 1 offsets.topic.segment.bytes = 104857600 principal.builder.class = class org.apache.kafka.common.security.authenticator.DefaultKafkaPrincipalBuilder process.roles = [broker, controller] producer.id.expiration.check.interval.ms = 600000 producer.id.expiration.ms = 86400000 producer.purgatory.purge.interval.requests = 1000 queued.max.request.bytes = -1 queued.max.requests = 500 quota.window.num = 11 quota.window.size.seconds = 1 remote.fetch.max.wait.ms = 500 remote.list.offsets.request.timeout.ms = 30000 remote.log.index.file.cache.total.size.bytes = 1073741824 remote.log.manager.copier.thread.pool.size = 10 remote.log.manager.copy.max.bytes.per.second = 9223372036854775807 remote.log.manager.copy.quota.window.num = 11 remote.log.manager.copy.quota.window.size.seconds = 1 remote.log.manager.expiration.thread.pool.size = 10 remote.log.manager.fetch.max.bytes.per.second = 9223372036854775807 remote.log.manager.fetch.quota.window.num = 11 remote.log.manager.fetch.quota.window.size.seconds = 1 remote.log.manager.task.interval.ms = 30000 remote.log.manager.task.retry.backoff.max.ms = 30000 remote.log.manager.task.retry.backoff.ms = 500 remote.log.manager.task.retry.jitter = 0.2 remote.log.manager.thread.pool.size = 2 remote.log.metadata.custom.metadata.max.bytes = 128 remote.log.metadata.manager.class.name = org.apache.kafka.server.log.remote.metadata.storage.TopicBasedRemoteLogMetadataManager remote.log.metadata.manager.class.path = null remote.log.metadata.manager.impl.prefix = rlmm.config. remote.log.metadata.manager.listener.name = null remote.log.reader.max.pending.tasks = 100 remote.log.reader.threads = 10 remote.log.storage.manager.class.name = null remote.log.storage.manager.class.path = null remote.log.storage.manager.impl.prefix = rsm.config. remote.log.storage.system.enable = false replica.fetch.backoff.ms = 1000 replica.fetch.max.bytes = 1048576 replica.fetch.min.bytes = 1 replica.fetch.response.max.bytes = 10485760 replica.fetch.wait.max.ms = 500 replica.high.watermark.checkpoint.interval.ms = 5000 replica.lag.time.max.ms = 30000 replica.selector.class = null replica.socket.receive.buffer.bytes = 65536 replica.socket.timeout.ms = 30000 replication.quota.window.num = 11 replication.quota.window.size.seconds = 1 request.timeout.ms = 30000 sasl.client.callback.handler.class = null sasl.enabled.mechanisms = [OAUTHBEARER] sasl.jaas.config = null sasl.kerberos.kinit.cmd = /usr/bin/kinit sasl.kerberos.min.time.before.relogin = 60000 sasl.kerberos.principal.to.local.rules = [DEFAULT] sasl.kerberos.service.name = null sasl.kerberos.ticket.renew.jitter = 0.05 sasl.kerberos.ticket.renew.window.factor = 0.8 sasl.login.callback.handler.class = null sasl.login.class = null sasl.login.connect.timeout.ms = null sasl.login.read.timeout.ms = null sasl.login.refresh.buffer.seconds = 300 sasl.login.refresh.min.period.seconds = 60 sasl.login.refresh.window.factor = 0.8 sasl.login.refresh.window.jitter = 0.05 sasl.login.retry.backoff.max.ms = 10000 sasl.login.retry.backoff.ms = 100 sasl.mechanism.controller.protocol = GSSAPI sasl.mechanism.inter.broker.protocol = OAUTHBEARER sasl.oauthbearer.assertion.algorithm = RS256 sasl.oauthbearer.assertion.claim.aud = null sasl.oauthbearer.assertion.claim.exp.seconds = 300 sasl.oauthbearer.assertion.claim.iss = null sasl.oauthbearer.assertion.claim.jti.include = false sasl.oauthbearer.assertion.claim.nbf.seconds = 60 sasl.oauthbearer.assertion.claim.sub = null sasl.oauthbearer.assertion.file = null sasl.oauthbearer.assertion.private.key.file = null sasl.oauthbearer.assertion.private.key.passphrase = null sasl.oauthbearer.assertion.template.file = null sasl.oauthbearer.client.credentials.client.id = valid-broker sasl.oauthbearer.client.credentials.client.secret = [hidden] sasl.oauthbearer.clock.skew.seconds = 30 sasl.oauthbearer.expected.audience = [kafka-broker] sasl.oauthbearer.expected.issuer = https://mock-idp.example.com sasl.oauthbearer.jwks.endpoint.refresh.ms = 3600000 sasl.oauthbearer.jwks.endpoint.retry.backoff.max.ms = 10000 sasl.oauthbearer.jwks.endpoint.retry.backoff.ms = 100 sasl.oauthbearer.jwks.endpoint.url = null sasl.oauthbearer.jwt.retriever.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtRetriever sasl.oauthbearer.jwt.validator.class = class org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator sasl.oauthbearer.scope = null sasl.oauthbearer.scope.claim.name = scope sasl.oauthbearer.sub.claim.name = sub sasl.oauthbearer.token.endpoint.url = http://127.0.0.1:46139/token sasl.server.callback.handler.class = null sasl.server.max.receive.size = 524288 security.inter.broker.protocol = PLAINTEXT security.providers = null server.max.startup.time.ms = 9223372036854775807 share.coordinator.append.linger.ms = 5 share.coordinator.cold.partition.snapshot.interval.ms = 300000 share.coordinator.load.buffer.size = 5242880 share.coordinator.snapshot.update.records.per.snapshot = 500 share.coordinator.state.topic.compression.codec = 0 share.coordinator.state.topic.min.isr = 2 share.coordinator.state.topic.num.partitions = 50 share.coordinator.state.topic.prune.interval.ms = 300000 share.coordinator.state.topic.replication.factor = 3 share.coordinator.state.topic.segment.bytes = 104857600 share.coordinator.threads = 1 share.coordinator.write.timeout.ms = 5000 share.fetch.purgatory.purge.interval.requests = 1000 socket.connection.setup.timeout.max.ms = 30000 socket.connection.setup.timeout.ms = 10000 socket.listen.backlog.size = 50 socket.receive.buffer.bytes = 102400 socket.request.max.bytes = 104857600 socket.send.buffer.bytes = 102400 ssl.allow.dn.changes = false ssl.allow.san.changes = false ssl.cipher.suites = [] ssl.client.auth = none ssl.enabled.protocols = [TLSv1.2, TLSv1.3] ssl.endpoint.identification.algorithm = https ssl.engine.factory.class = null ssl.key.password = null ssl.keymanager.algorithm = SunX509 ssl.keystore.certificate.chain = null ssl.keystore.key = null ssl.keystore.location = null ssl.keystore.password = null ssl.keystore.type = JKS ssl.principal.mapping.rules = DEFAULT ssl.protocol = TLSv1.3 ssl.provider = null ssl.secure.random.implementation = null ssl.trustmanager.algorithm = PKIX ssl.truststore.certificates = null ssl.truststore.location = null ssl.truststore.password = null ssl.truststore.type = JKS telemetry.max.bytes = 1048576 transaction.abort.timed.out.transaction.cleanup.interval.ms = 10000 transaction.max.timeout.ms = 900000 transaction.partition.verification.enable = true transaction.remove.expired.transaction.cleanup.interval.ms = 3600000 transaction.state.log.load.buffer.size = 5242880 transaction.state.log.min.isr = 1 transaction.state.log.num.partitions = 50 transaction.state.log.replication.factor = 1 transaction.state.log.segment.bytes = 104857600 transaction.two.phase.commit.enable = false transactional.id.expiration.ms = 604800000 unclean.leader.election.enable = false unclean.leader.election.interval.ms = 300000 unstable.api.versions.enable = false unstable.feature.versions.enable = false (org.apache.kafka.common.config.AbstractConfig) [2026-07-11 04:18:23,097] INFO [BrokerServer id=0] Waiting for the broker to be unfenced (kafka.server.BrokerServer) [2026-07-11 04:18:23,128] INFO [BrokerLifecycleManager id=0] The broker has been unfenced. Transitioning from RECOVERY to RUNNING. (kafka.server.BrokerLifecycleManager) [2026-07-11 04:18:23,128] INFO [BrokerServer id=0] Finished waiting for the broker to be unfenced (kafka.server.BrokerServer) [2026-07-11 04:18:23,128] INFO authorizerStart completed for endpoint SASL_PLAINTEXT. Endpoint is now READY. (org.apache.kafka.server.network.EndpointReadyFutures) [2026-07-11 04:18:23,128] INFO [SocketServer listenerType=BROKER, nodeId=0] Enabling request processing. (kafka.network.SocketServer) [2026-07-11 04:18:23,129] INFO Awaiting socket connections on 127.0.0.1:48261. (kafka.network.DataPlaneAcceptor) [2026-07-11 04:18:23,129] INFO [BrokerServer id=0] Waiting for all of the authorizer futures to be completed (kafka.server.BrokerServer) [2026-07-11 04:18:23,129] INFO [BrokerServer id=0] Finished waiting for all of the authorizer futures to be completed (kafka.server.BrokerServer) [2026-07-11 04:18:23,130] INFO [BrokerServer id=0] Waiting for all of the SocketServer Acceptors to be started (kafka.server.BrokerServer) [2026-07-11 04:18:23,130] INFO [BrokerServer id=0] Finished waiting for all of the SocketServer Acceptors to be started (kafka.server.BrokerServer) [2026-07-11 04:18:23,130] INFO [BrokerServer id=0] Transition from STARTING to STARTED (kafka.server.BrokerServer) [2026-07-11 04:18:23,130] INFO Kafka version: 4.1.2 (org.apache.kafka.common.utils.AppInfoParser) [2026-07-11 04:18:23,130] INFO Kafka commitId: c82fd9b934b4c1e6 (org.apache.kafka.common.utils.AppInfoParser) [2026-07-11 04:18:23,130] INFO Kafka startTimeMs: 1783743503130 (org.apache.kafka.common.utils.AppInfoParser) [2026-07-11 04:18:23,131] INFO [KafkaRaftServer nodeId=0] Kafka Server started (kafka.server.KafkaRaftServer) [2026-07-11 04:18:23,737] WARN Could not validate the access token: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://attacker-idp.example.net","aud":"kafka-broker","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[12] Issuer (iss) claim value (https://attacker-idp.example.net) doesn't match expected value of https://mock-idp.example.com] (org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler) org.apache.kafka.common.security.oauthbearer.JwtValidatorException: Could not validate the access token: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://attacker-idp.example.net","aud":"kafka-broker","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[12] Issuer (iss) claim value (https://attacker-idp.example.net) doesn't match expected value of https://mock-idp.example.com] at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:159) at org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator.validate(DefaultJwtValidator.java:76) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handleValidatorCallback(OAuthBearerValidatorCallbackHandler.java:158) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handle(OAuthBearerValidatorCallbackHandler.java:143) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.process(OAuthBearerSaslServer.java:156) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.evaluateResponse(OAuthBearerSaslServer.java:101) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.handleSaslToken(SaslServerAuthenticator.java:461) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.authenticate(SaslServerAuthenticator.java:286) at org.apache.kafka.common.network.KafkaChannel.prepare(KafkaChannel.java:181) at org.apache.kafka.common.network.Selector.pollSelectionKeys(Selector.java:548) at org.apache.kafka.common.network.Selector.poll(Selector.java:486) at kafka.network.Processor.poll(SocketServer.scala:1010) at kafka.network.Processor.run(SocketServer.scala:914) at java.base/java.lang.Thread.run(Thread.java:840) Caused by: org.jose4j.jwt.consumer.InvalidJwtException: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://attacker-idp.example.net","aud":"kafka-broker","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[12] Issuer (iss) claim value (https://attacker-idp.example.net) doesn't match expected value of https://mock-idp.example.com] at org.jose4j.jwt.consumer.JwtConsumer.validate(JwtConsumer.java:459) at org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:304) at org.jose4j.jwt.consumer.JwtConsumer.process(JwtConsumer.java:410) at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:157) ... 13 more [2026-07-11 04:18:23,738] INFO [SocketServer listenerType=BROKER, nodeId=0] Failed authentication with /127.0.0.1 (channelId=127.0.0.1:48261-127.0.0.1:39504-2-0) ({"status":"invalid_token"}) (org.apache.kafka.common.network.Selector) [2026-07-11 04:18:24,099] WARN Could not validate the access token: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://mock-idp.example.com","aud":"other-service","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[8] Audience (aud) claim [other-service] doesn't contain an acceptable identifier. Expected kafka-broker as an aud value.] (org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler) org.apache.kafka.common.security.oauthbearer.JwtValidatorException: Could not validate the access token: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://mock-idp.example.com","aud":"other-service","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[8] Audience (aud) claim [other-service] doesn't contain an acceptable identifier. Expected kafka-broker as an aud value.] at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:159) at org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator.validate(DefaultJwtValidator.java:76) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handleValidatorCallback(OAuthBearerValidatorCallbackHandler.java:158) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handle(OAuthBearerValidatorCallbackHandler.java:143) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.process(OAuthBearerSaslServer.java:156) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.evaluateResponse(OAuthBearerSaslServer.java:101) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.handleSaslToken(SaslServerAuthenticator.java:461) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.authenticate(SaslServerAuthenticator.java:286) at org.apache.kafka.common.network.KafkaChannel.prepare(KafkaChannel.java:181) at org.apache.kafka.common.network.Selector.pollSelectionKeys(Selector.java:548) at org.apache.kafka.common.network.Selector.poll(Selector.java:486) at kafka.network.Processor.poll(SocketServer.scala:1010) at kafka.network.Processor.run(SocketServer.scala:914) at java.base/java.lang.Thread.run(Thread.java:840) Caused by: org.jose4j.jwt.consumer.InvalidJwtException: JWT (claims->{"sub":"variant-user","preferred_username":"variant-user","iss":"https://mock-idp.example.com","aud":"other-service","iat":1783743433,"exp":1783747093,"scope":"kafka-cluster"}) rejected due to invalid claims or other invalid content. Additional details: [[8] Audience (aud) claim [other-service] doesn't contain an acceptable identifier. Expected kafka-broker as an aud value.] at org.jose4j.jwt.consumer.JwtConsumer.validate(JwtConsumer.java:459) at org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:304) at org.jose4j.jwt.consumer.JwtConsumer.process(JwtConsumer.java:410) at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:157) ... 13 more [2026-07-11 04:18:24,100] INFO [SocketServer listenerType=BROKER, nodeId=0] Failed authentication with /127.0.0.1 (channelId=127.0.0.1:48261-127.0.0.1:39512-0-1) ({"status":"invalid_token"}) (org.apache.kafka.common.network.Selector) [2026-07-11 04:18:24,463] WARN Could not validate the access token: JWT rejected due to invalid signature. Additional details: [[9] Invalid JWS Signature: JsonWebSignature{"alg":"RS256","kid":"pruva-trusted-key","typ":"JWT"}->eyJhbGciOiJSUzI1NiIsImtpZCI6InBydXZhLXRydXN0ZWQta2V5IiwidHlwIjoiSldUIn0.eyJzdWIiOiJ2YXJpYW50LXVzZXIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJ2YXJpYW50LXVzZXIiLCJpc3MiOiJodHRwczovL21vY2staWRwLmV4YW1wbGUuY29tIiwiYXVkIjoia2Fma2EtYnJva2VyIiwiaWF0IjoxNzgzNzQzNDMzLCJleHAiOjE3ODM3NDcwOTMsInNjb3BlIjoia2Fma2EtY2x1c3RlciJ9.Qh1Nwh2dzj98QGx6uWMFqERyEy5ZfLouy8INzfVBbCMn-IeX8YGUX6PbIe9uOTpwek-11G2FBQcN8HIvxccWN5lmMgmp-j0AE_g7Y_CXZDSLOwZBTbcw3TslI4PqVNTcfIod0KHb308ArOLlYyiGK_8UiYMZH_2C08Z26ZQyjVggGRFOmb0DmEBd3rudfn0FQMFzZkJipHLReYMlcX9PF75QjIV8IHvipuWXuIqpoPlo4QWD6SFN7Rk8iG-oV6k4f-BIGgChpKCB6B0ls7DIa_W3EYEgE0af87BFtryyuDoLxk3YI_X7duaAuDVEBSW3MvDclS0mNVrTjdKV1_12WA] (org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler) org.apache.kafka.common.security.oauthbearer.JwtValidatorException: Could not validate the access token: JWT rejected due to invalid signature. Additional details: [[9] Invalid JWS Signature: JsonWebSignature{"alg":"RS256","kid":"pruva-trusted-key","typ":"JWT"}->eyJhbGciOiJSUzI1NiIsImtpZCI6InBydXZhLXRydXN0ZWQta2V5IiwidHlwIjoiSldUIn0.eyJzdWIiOiJ2YXJpYW50LXVzZXIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJ2YXJpYW50LXVzZXIiLCJpc3MiOiJodHRwczovL21vY2staWRwLmV4YW1wbGUuY29tIiwiYXVkIjoia2Fma2EtYnJva2VyIiwiaWF0IjoxNzgzNzQzNDMzLCJleHAiOjE3ODM3NDcwOTMsInNjb3BlIjoia2Fma2EtY2x1c3RlciJ9.Qh1Nwh2dzj98QGx6uWMFqERyEy5ZfLouy8INzfVBbCMn-IeX8YGUX6PbIe9uOTpwek-11G2FBQcN8HIvxccWN5lmMgmp-j0AE_g7Y_CXZDSLOwZBTbcw3TslI4PqVNTcfIod0KHb308ArOLlYyiGK_8UiYMZH_2C08Z26ZQyjVggGRFOmb0DmEBd3rudfn0FQMFzZkJipHLReYMlcX9PF75QjIV8IHvipuWXuIqpoPlo4QWD6SFN7Rk8iG-oV6k4f-BIGgChpKCB6B0ls7DIa_W3EYEgE0af87BFtryyuDoLxk3YI_X7duaAuDVEBSW3MvDclS0mNVrTjdKV1_12WA] at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:159) at org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator.validate(DefaultJwtValidator.java:76) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handleValidatorCallback(OAuthBearerValidatorCallbackHandler.java:158) at org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler.handle(OAuthBearerValidatorCallbackHandler.java:143) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.process(OAuthBearerSaslServer.java:156) at org.apache.kafka.common.security.oauthbearer.internals.OAuthBearerSaslServer.evaluateResponse(OAuthBearerSaslServer.java:101) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.handleSaslToken(SaslServerAuthenticator.java:461) at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.authenticate(SaslServerAuthenticator.java:286) at org.apache.kafka.common.network.KafkaChannel.prepare(KafkaChannel.java:181) at org.apache.kafka.common.network.Selector.pollSelectionKeys(Selector.java:548) at org.apache.kafka.common.network.Selector.poll(Selector.java:486) at kafka.network.Processor.poll(SocketServer.scala:1010) at kafka.network.Processor.run(SocketServer.scala:914) at java.base/java.lang.Thread.run(Thread.java:840) Caused by: org.jose4j.jwt.consumer.InvalidJwtSignatureException: JWT rejected due to invalid signature. Additional details: [[9] Invalid JWS Signature: JsonWebSignature{"alg":"RS256","kid":"pruva-trusted-key","typ":"JWT"}->eyJhbGciOiJSUzI1NiIsImtpZCI6InBydXZhLXRydXN0ZWQta2V5IiwidHlwIjoiSldUIn0.eyJzdWIiOiJ2YXJpYW50LXVzZXIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJ2YXJpYW50LXVzZXIiLCJpc3MiOiJodHRwczovL21vY2staWRwLmV4YW1wbGUuY29tIiwiYXVkIjoia2Fma2EtYnJva2VyIiwiaWF0IjoxNzgzNzQzNDMzLCJleHAiOjE3ODM3NDcwOTMsInNjb3BlIjoia2Fma2EtY2x1c3RlciJ9.Qh1Nwh2dzj98QGx6uWMFqERyEy5ZfLouy8INzfVBbCMn-IeX8YGUX6PbIe9uOTpwek-11G2FBQcN8HIvxccWN5lmMgmp-j0AE_g7Y_CXZDSLOwZBTbcw3TslI4PqVNTcfIod0KHb308ArOLlYyiGK_8UiYMZH_2C08Z26ZQyjVggGRFOmb0DmEBd3rudfn0FQMFzZkJipHLReYMlcX9PF75QjIV8IHvipuWXuIqpoPlo4QWD6SFN7Rk8iG-oV6k4f-BIGgChpKCB6B0ls7DIa_W3EYEgE0af87BFtryyuDoLxk3YI_X7duaAuDVEBSW3MvDclS0mNVrTjdKV1_12WA] at org.jose4j.jwt.consumer.JwtConsumer.processContext(JwtConsumer.java:224) at org.jose4j.jwt.consumer.JwtConsumer.process(JwtConsumer.java:410) at org.apache.kafka.common.security.oauthbearer.BrokerJwtValidator.validate(BrokerJwtValidator.java:157) ... 13 more [2026-07-11 04:18:24,464] INFO [SocketServer listenerType=BROKER, nodeId=0] Failed authentication with /127.0.0.1 (channelId=127.0.0.1:48261-127.0.0.1:39522-1-1) ({"status":"invalid_token"}) (org.apache.kafka.common.network.Selector)