Core Dump Socket. [ 18.005271] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 18.008705] systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. [ 18.011491] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 18.014038] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 18.016810] systemd[1]: Listening on systemd-networkd-varlink.socket - Network Service Varlink Socket. [ 18.019313] systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. [ 18.021423] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 18.023930] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 18.027204] systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. [ 18.029664] systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. [ 18.033273] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 18.035462] systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. [ 18.038021] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 18.042683] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 18.049336] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 18.055845] systemd[1]: Mounting media.mount - External Media Directory... [ 18.058658] systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 18.062874] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 18.068413] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 18.072421] systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. [ 18.076612] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 18.078793] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). [ 18.082241] systemd[1]: Reached target machines.target - Virtual Machines and Containers. [ 18.099571] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 18.102439] systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. [ 18.112587] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 18.119970] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 18.124016] systemd[1]: modprobe@dm_mod.service - Load Kernel Module dm_mod was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!dm_mod). [ 18.129394] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 18.131715] systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!efi_pstore). [ 18.138377] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 18.142295] systemd[1]: modprobe@loop.service - Load Kernel Module loop was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!loop). [ 18.145402] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 18.148483] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 18.150054] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 18.152524] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 18.154007] systemd[1]: Stopped systemd-fsck-usr.service. [ 18.155683] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). [ 18.169353] systemd[1]: Starting systemd-journald.service - Journal Service... [ 18.176152] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 18.188852] systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... [ 18.192288] systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. [ 18.194921] systemd[1]: Reached target time-set.target - System Time Set. [ 18.201937] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 18.213800] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 18.221125] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 18.225224] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 18.240512] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 18.242693] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 18.247698] systemd[1]: Mounted media.mount - External Media Directory. [ 18.250048] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 18.254146] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 18.259756] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 18.267073] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 18.272564] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 18.275626] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 18.280914] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. [ 18.286788] systemd-journald[1495]: Collecting audit messages is enabled. [ 18.288421] systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. [ 18.298585] fuse: init (API version 7.41) [ 18.298603] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. [ 18.302992] systemd[1]: Reached target network-pre.target - Preparation for Network. [ 18.306486] systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. [ 18.310850] systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... [ 18.316338] systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). [ 18.323998] systemd[1]: Reached target local-fs.target - Local File Systems. [ 18.329758] systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. [ 18.333222] systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. [ 18.341456] systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... [ 18.349199] systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... [ 18.355064] systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). [ 18.370517] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... [ 18.386559] ACPI: bus type drm_connector registered [ 18.394958] systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... [ 18.406673] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... [ 18.426492] systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... [ 18.435988] systemd[1]: Started systemd-journald.service - Journal Service. [ 18.523874] systemd-journald[1495]: Received client request to flush runtime journal. [ 18.554058] set_capacity_and_notify: 2 callbacks suppressed [ 18.554061] loop6: detected capacity change from 0 to 43192 [ 18.580355] loop6: p1 p2 p3 [ 18.608153] erofs: (device loop6p1): mounted with root inode @ nid 40. [ 18.647306] loop6: detected capacity change from 0 to 43192 [ 18.663507] loop6: p1 p2 p3 [ 18.732300] device-mapper: verity: sha256 using shash "sha256-avx2" [ 18.733629] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 18.737674] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 18.741218] device-mapper: ioctl: error adding target to table [ 18.753271] device-mapper: verity: sha256 using shash "sha256-avx2" [ 18.887466] tun: Universal TUN/TAP device driver, 1.6 [ 20.117774] mousedev: PS/2 mouse device common for all mice [ 20.164015] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 20.169344] ACPI: button: Power Button [PWRF] [ 20.170547] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 20.172439] ACPI: button: Sleep Button [SLPF] [ 20.186101] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 20.493608] erofs: (device dm-5): mounted with root inode @ nid 40. [ 20.520740] loop6: detected capacity change from 0 to 177280 [ 20.524406] loop6: p1 p2 p3 [ 20.540926] erofs: (device loop6p1): mounted with root inode @ nid 39. [ 20.569118] loop6: detected capacity change from 0 to 291952 [ 20.575549] loop6: p1 p2 p3 [ 20.597770] erofs: (device loop6p1): mounted with root inode @ nid 39. [ 20.617031] loop6: detected capacity change from 0 to 217752 [ 20.682859] loop6: detected capacity change from 0 to 378016 [ 20.687340] loop6: p1 p2 p3 [ 20.722540] erofs: (device loop6p1): mounted with root inode @ nid 39. [ 20.793763] loop6: detected capacity change from 0 to 177280 [ 20.798427] loop6: p1 p2 p3 [ 20.851317] device-mapper: verity: sha256 using shash "sha256-avx2" [ 20.854206] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 20.857245] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 20.859205] device-mapper: ioctl: error adding target to table [ 20.866766] device-mapper: verity: sha256 using shash "sha256-avx2" [ 20.932023] erofs: (device dm-5): mounted with root inode @ nid 39. [ 20.938555] loop7: detected capacity change from 0 to 291952 [ 20.940054] loop7: p1 p2 p3 [ 20.962342] device-mapper: verity: sha256 using shash "sha256-avx2" [ 20.962347] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 20.962352] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 20.962355] device-mapper: ioctl: error adding target to table [ 20.965424] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.065368] erofs: (device dm-6): mounted with root inode @ nid 39. [ 21.069081] loop8: detected capacity change from 0 to 217752 [ 21.096880] loop9: detected capacity change from 0 to 378016 [ 21.101205] loop9: p1 p2 p3 [ 21.138406] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.139705] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.142092] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 21.143722] device-mapper: ioctl: error adding target to table [ 21.148206] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.217291] erofs: (device dm-7): mounted with root inode @ nid 39. [ 21.231789] kauditd_printk_skb: 78 callbacks suppressed [ 21.231793] audit: type=1130 audit(1779813819.158:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.313642] audit: type=1130 audit(1779813819.239:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.352108] audit: type=1127 audit(1779813819.277:173): pid=1794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 21.358007] audit: type=1130 audit(1779813819.283:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.418263] audit: type=1130 audit(1779813819.344:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.437903] audit: type=1130 audit(1779813819.363:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.490235] audit: type=1305 audit(1779813819.415:177): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 [ 21.495902] audit: type=1300 audit(1779813819.415:177): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff849a93b0 a2=420 a3=0 items=0 ppid=1790 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 21.502370] audit: type=1327 audit(1779813819.415:177): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 24.825262] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 24.864912] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 [!p]104[?7hP+q6E616D65\2026/05/26 16:43:45Z: Amazon SSM Agent v3.3.0.0 is running 2026/05/26 16:43:45Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/05/26 16:43:45Z: OsVersion: 4628.1.2 This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:43:46 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 41.187317] audit: type=1305 audit(1779813839.977:178): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 41.189643] audit: type=1300 audit(1779813839.977:178): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffde0775470 a2=420 a3=0 items=0 ppid=2238 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 41.195265] audit: type=1327 audit(1779813839.977:178): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 41.197238] audit: type=1130 audit(1779813839.979:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.200231] audit: type=1131 audit(1779813839.979:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.203085] audit: type=1106 audit(1779813839.984:181): pid=2232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.206318] audit: type=1104 audit(1779813839.984:182): pid=2232 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.357108] audit: type=1106 audit(1779813840.146:183): pid=2227 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 41.361914] audit: type=1104 audit(1779813840.147:184): pid=2227 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 41.367992] audit: type=1131 audit(1779813840.155:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4-172.31.17.158:22-50.85.169.122:59472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.881923] kauditd_printk_skb: 11 callbacks suppressed [ 48.881927] audit: type=1130 audit(1779813847.671:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.941637] audit: type=1131 audit(1779813847.731:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 50.963009] Initializing XFRM netlink socket [ 51.089572] audit: type=1325 audit(1779813849.879:197): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.092619] audit: type=1300 audit(1779813849.879:197): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff7156ec60 a2=0 a3=0 items=0 ppid=2290 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.098963] audit: type=1327 audit(1779813849.879:197): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 51.101913] audit: type=1325 audit(1779813849.882:198): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.105107] audit: type=1300 audit(1779813849.882:198): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffca200a100 a2=0 a3=0 items=0 ppid=2290 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.111589] audit: type=1327 audit(1779813849.882:198): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 51.114455] audit: type=1325 audit(1779813849.884:199): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.117253] audit: type=1300 audit(1779813849.884:199): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3c38bf30 a2=0 a3=0 items=0 ppid=2290 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:11 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 56.375940] kauditd_printk_skb: 107 callbacks suppressed [ 56.375944] audit: type=1131 audit(1779813855.165:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.395246] audit: type=1334 audit(1779813855.185:237): prog-id=38 op=UNLOAD [ 59.468037] audit: type=1130 audit(1779813858.257:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.600131] audit: type=1131 audit(1779813858.389:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 64.570521] audit: type=1130 audit(1779813863.360:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.577432] audit: type=1131 audit(1779813863.360:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.778738] zram_generator::config[2809]: No configuration found. [ 65.154989] audit: type=1334 audit(1779813863.944:242): prog-id=42 op=LOAD [ 65.156787] audit: type=1334 audit(1779813863.944:243): prog-id=25 op=UNLOAD [ 65.159177] audit: type=1334 audit(1779813863.948:244): prog-id=43 op=LOAD [ 65.160836] audit: type=1334 audit(1779813863.949:245): prog-id=26 op=UNLOAD [ 65.162459] audit: type=1334 audit(1779813863.949:246): prog-id=44 op=LOAD [ 65.163984] audit: type=1334 audit(1779813863.949:247): prog-id=45 op=LOAD [ 65.165537] audit: type=1334 audit(1779813863.949:248): prog-id=27 op=UNLOAD [ 65.167036] audit: type=1334 audit(1779813863.949:249): prog-id=28 op=UNLOAD [ 72.222109] zram_generator::config[3391]: No configuration found. [ 72.628659] kauditd_printk_skb: 202 callbacks suppressed [ 72.628663] audit: type=1334 audit(1779813871.418:344): prog-id=92 op=LOAD [ 72.631653] audit: type=1334 audit(1779813871.418:345): prog-id=42 op=UNLOAD [ 72.633444] audit: type=1334 audit(1779813871.420:346): prog-id=93 op=LOAD [ 72.634875] audit: type=1334 audit(1779813871.420:347): prog-id=85 op=UNLOAD [ 72.636462] audit: type=1334 audit(1779813871.423:348): prog-id=94 op=LOAD [ 72.638106] audit: type=1334 audit(1779813871.424:349): prog-id=43 op=UNLOAD [ 72.639651] audit: type=1334 audit(1779813871.424:350): prog-id=95 op=LOAD [ 72.641133] audit: type=1334 audit(1779813871.424:351): prog-id=96 op=LOAD [ 72.642677] audit: type=1334 audit(1779813871.424:352): prog-id=44 op=UNLOAD [ 72.644117] audit: type=1334 audit(1779813871.424:353): prog-id=45 op=UNLOAD [ 78.537553] kauditd_printk_skb: 54 callbacks suppressed [ 78.537557] audit: type=1334 audit(1779813877.327:408): prog-id=118 op=LOAD [ 78.541475] audit: type=1334 audit(1779813877.331:409): prog-id=119 op=LOAD [ 78.542973] audit: type=1300 audit(1779813877.331:409): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a240 a2=98 a3=0 items=0 ppid=3546 pid=3572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 78.552741] audit: type=1327 audit(1779813877.331:409): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364633564333965633566336539363733383263643039616562383365 [ 78.557970] audit: type=1334 audit(1779813877.331:410): prog-id=119 op=UNLOAD [ 78.559235] audit: type=1300 audit(1779813877.331:410): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3546 pid=3572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 78.564637] audit: type=1327 audit(1779813877.331:410): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364633564333965633566336539363733383263643039616562383365 [ 78.569945] audit: type=1334 audit(1779813877.332:411): prog-id=120 op=LOAD [ 78.571210] audit: type=1300 audit(1779813877.332:411): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a490 a2=98 a3=0 items=0 ppid=3546 pid=3572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 78.576724] audit: type=1327 audit(1779813877.332:411): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364633564333965633566336539363733383263643039616562383365 [ 85.877101] kauditd_printk_skb: 224 callbacks suppressed [ 85.877105] audit: type=1334 audit(1779813884.666:488): prog-id=136 op=LOAD [ 85.880137] audit: type=1334 audit(1779813884.667:489): prog-id=137 op=LOAD [ 85.881621] audit: type=1300 audit(1779813884.667:489): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000128240 a2=98 a3=0 items=0 ppid=3546 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.887217] audit: type=1327 audit(1779813884.667:489): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393434623931613661313739313433326636386561323031376563 [ 85.896713] audit: type=1334 audit(1779813884.667:490): prog-id=137 op=UNLOAD [ 85.898235] audit: type=1300 audit(1779813884.667:490): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3546 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.905742] audit: type=1327 audit(1779813884.667:490): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393434623931613661313739313433326636386561323031376563 [ 85.911910] audit: type=1334 audit(1779813884.667:491): prog-id=138 op=LOAD [ 85.913473] audit: type=1300 audit(1779813884.667:491): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000128490 a2=98 a3=0 items=0 ppid=3546 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.918796] audit: type=1327 audit(1779813884.667:491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393434623931613661313739313433326636386561323031376563 [ 90.878583] kauditd_printk_skb: 980 callbacks suppressed [ 90.878588] audit: type=1334 audit(1779813889.668:826): prog-id=307 op=LOAD [ 90.881937] audit: type=1300 audit(1779813889.668:826): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffbe4c7460 a2=90 a3=2 items=0 ppid=4087 pid=4146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.889119] audit: type=1327 audit(1779813889.668:826): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.892000] audit: type=1334 audit(1779813889.668:827): prog-id=307 op=UNLOAD [ 90.893901] audit: type=1300 audit(1779813889.668:827): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7fffbe4c7460 a2=90 a3=2 items=0 ppid=4087 pid=4146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.901292] audit: type=1327 audit(1779813889.668:827): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.903806] audit: type=1334 audit(1779813889.670:828): prog-id=308 op=LOAD [ 90.905224] audit: type=1300 audit(1779813889.670:828): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffbe4c7460 a2=90 a3=2 items=0 ppid=4087 pid=4146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.910722] audit: type=1327 audit(1779813889.670:828): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.912876] audit: type=1334 audit(1779813889.670:829): prog-id=308 op=UNLOAD This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:53 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 94.918628] NET: Registered PF_ALG protocol family This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:54 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 95.977373] kauditd_printk_skb: 5012 callbacks suppressed [ 95.977377] audit: type=1325 audit(1779813894.767:2500): table=mangle:149 family=2 entries=1 op=nft_register_rule pid=4526 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 95.983601] audit: type=1300 audit(1779813894.767:2500): arch=c000003e syscall=46 success=yes exit=720 a0=3 a1=7fff7882e8a0 a2=0 a3=7fff7882e88c items=0 ppid=4087 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.991638] audit: type=1327 audit(1779813894.767:2500): proctitle=69707461626C6573002D770035002D74006D616E676C65002D410043494C49554D5F5052455F6D616E676C65002D7000746370002D6D006D61726B002D2D6D61726B0030783339616130323030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A205450524F585920746F20686F73742063696C69756D [ 95.997402] audit: type=1325 audit(1779813894.770:2501): table=mangle:150 family=2 entries=1 op=nft_register_rule pid=4528 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 96.000721] audit: type=1300 audit(1779813894.770:2501): arch=c000003e syscall=46 success=yes exit=720 a0=3 a1=7ffe8f915270 a2=0 a3=7ffe8f91525c items=0 ppid=4087 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 96.007012] audit: type=1327 audit(1779813894.770:2501): proctitle=69707461626C6573002D770035002D74006D616E676C65002D410043494C49554D5F5052455F6D616E676C65002D7000756470002D6D006D61726B002D2D6D61726B0030783339616130323030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A205450524F585920746F20686F73742063696C69756D This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:55 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 96.724032] eth0: renamed from tmp05111 [ 96.759668] eth0: renamed from tmpe74d4 [ 97.486205] audit: type=1334 audit(1779813896.275:2502): prog-id=1123 op=LOAD [ 97.489021] audit: type=1300 audit(1779813896.275:2502): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe5a68aba0 a2=74 a3=7ffe5a68aba0 items=0 ppid=4087 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.498974] audit: type=1327 audit(1779813896.275:2502): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003132305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.506046] audit: type=1334 audit(1779813896.275:2503): prog-id=1123 op=UNLOAD This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:57 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:58 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:44:59 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 100.979369] kauditd_printk_skb: 275 callbacks suppressed [ 100.979373] audit: type=1334 audit(1779813899.752:2595): prog-id=1185 op=LOAD [ 100.984184] audit: type=1300 audit(1779813899.752:2595): arch=c000003e syscall=321 success=yes exit=42 a0=5 a1=7ffc4d3a8a60 a2=80 a3=0 items=0 ppid=4087 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.992183] audit: type=1327 audit(1779813899.752:2595): proctitle=74630066696C746572007265706C61636500646576006C786333663737303230646138663700656772657373007072696F00310068616E646C65003100627066006461006F626A003237305F6E6578742F6270665F6C78632E6F0073656300746F2D636F6E7461696E6572 [ 100.996976] audit: type=1334 audit(1779813899.771:2596): prog-id=1186 op=LOAD [ 100.998616] audit: type=1300 audit(1779813899.771:2596): arch=c000003e syscall=321 success=yes exit=43 a0=5 a1=7ffc4d3a8a60 a2=80 a3=0 items=0 ppid=4087 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.006180] audit: type=1327 audit(1779813899.771:2596): proctitle=74630066696C746572007265706C61636500646576006C786333663737303230646138663700656772657373007072696F00310068616E646C65003100627066006461006F626A003237305F6E6578742F6270665F6C78632E6F0073656300746F2D636F6E7461696E6572 [ 101.013222] audit: type=1334 audit(1779813899.763:2597): prog-id=1187 op=LOAD [ 101.014775] audit: type=1300 audit(1779813899.763:2597): arch=c000003e syscall=321 success=yes exit=40 a0=5 a1=7ffe9c15fed0 a2=80 a3=0 items=0 ppid=4087 pid=4584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.021185] audit: type=1327 audit(1779813899.763:2597): proctitle=74630066696C746572007265706C61636500646576006C786362623033643331303834336200656772657373007072696F00310068616E646C65003100627066006461006F626A00333330315F6E6578742F6270665F6C78632E6F0073656300746F2D636F6E7461696E6572 [ 101.026109] audit: type=1334 audit(1779813899.772:2598): prog-id=1188 op=LOAD [ 133.628656] kauditd_printk_skb: 312 callbacks suppressed [ 133.628660] audit: type=1130 audit(1779813932.418:2705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-6-172.31.17.158:22-50.85.169.122:56848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.523224] audit: type=1101 audit(1779813933.313:2706): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 134.529628] audit: type=1103 audit(1779813933.313:2707): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 134.535179] audit: type=1006 audit(1779813933.313:2708): pid=4760 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 134.538534] audit: type=1300 audit(1779813933.313:2708): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca9587740 a2=3 a3=0 items=0 ppid=1 pid=4760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.544109] audit: type=1327 audit(1779813933.313:2708): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 134.560601] audit: type=1105 audit(1779813933.350:2709): pid=4760 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 134.568828] audit: type=1103 audit(1779813933.358:2710): pid=4764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 135.662165] audit: type=1106 audit(1779813934.451:2711): pid=4760 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 135.671319] audit: type=1104 audit(1779813934.451:2712): pid=4760 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 140.837495] kauditd_printk_skb: 1 callbacks suppressed [ 140.837499] audit: type=1130 audit(1779813939.627:2714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4099-172.31.17.158:22-50.85.169.122:46904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.730455] audit: type=1101 audit(1779813940.520:2715): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 141.737035] audit: type=1103 audit(1779813940.522:2716): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 141.742473] audit: type=1006 audit(1779813940.522:2717): pid=4779 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 141.745894] audit: type=1300 audit(1779813940.522:2717): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff8f89f020 a2=3 a3=0 items=0 ppid=1 pid=4779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.751866] audit: type=1327 audit(1779813940.522:2717): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 141.759351] audit: type=1105 audit(1779813940.549:2718): pid=4779 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 141.766090] audit: type=1103 audit(1779813940.552:2719): pid=4783 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 142.321228] audit: type=1106 audit(1779813941.109:2720): pid=4779 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 142.330410] audit: type=1104 audit(1779813941.110:2721): pid=4779 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.496911] kauditd_printk_skb: 1 callbacks suppressed [ 147.496915] audit: type=1130 audit(1779813946.286:2723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4100-172.31.17.158:22-50.85.169.122:46920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.375270] audit: type=1101 audit(1779813947.165:2724): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.386485] audit: type=1103 audit(1779813947.167:2725): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.392454] audit: type=1006 audit(1779813947.167:2726): pid=4797 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 148.395835] audit: type=1300 audit(1779813947.167:2726): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc05dd7530 a2=3 a3=0 items=0 ppid=1 pid=4797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.401514] audit: type=1327 audit(1779813947.167:2726): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 148.409869] audit: type=1105 audit(1779813947.199:2727): pid=4797 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.417382] audit: type=1103 audit(1779813947.207:2728): pid=4801 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.988434] audit: type=1106 audit(1779813947.778:2729): pid=4797 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.995006] audit: type=1104 audit(1779813947.781:2730): pid=4797 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 154.157388] kauditd_printk_skb: 1 callbacks suppressed [ 154.157392] audit: type=1130 audit(1779813952.946:2732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4101-172.31.17.158:22-50.85.169.122:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.017112] audit: type=1101 audit(1779813953.806:2733): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.023262] audit: type=1103 audit(1779813953.808:2734): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.030338] audit: type=1006 audit(1779813953.808:2735): pid=4815 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 155.033656] audit: type=1300 audit(1779813953.808:2735): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd02086480 a2=3 a3=0 items=0 ppid=1 pid=4815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.039671] audit: type=1327 audit(1779813953.808:2735): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.048432] audit: type=1105 audit(1779813953.838:2736): pid=4815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.056092] audit: type=1103 audit(1779813953.845:2737): pid=4820 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.582170] audit: type=1106 audit(1779813954.370:2738): pid=4815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.589373] audit: type=1104 audit(1779813954.370:2739): pid=4815 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 164.060937] kauditd_printk_skb: 23 callbacks suppressed [ 164.060941] audit: type=1130 audit(1779813962.849:2759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.17.158:22-50.85.169.122:37884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.976620] audit: type=1101 audit(1779813963.766:2760): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 164.984368] audit: type=1103 audit(1779813963.770:2761): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 164.990250] audit: type=1006 audit(1779813963.770:2762): pid=4863 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 164.998332] audit: type=1300 audit(1779813963.770:2762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe55836ed0 a2=3 a3=0 items=0 ppid=1 pid=4863 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.005430] audit: type=1327 audit(1779813963.770:2762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 165.008623] audit: type=1105 audit(1779813963.798:2763): pid=4863 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.016049] audit: type=1103 audit(1779813963.805:2764): pid=4867 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.548862] audit: type=1106 audit(1779813964.338:2765): pid=4863 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.555869] audit: type=1104 audit(1779813964.338:2766): pid=4863 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.629797] kauditd_printk_skb: 20 callbacks suppressed [ 169.629801] audit: type=1325 audit(1779813968.419:2783): table=filter:157 family=2 entries=20 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 169.634176] audit: type=1300 audit(1779813968.419:2783): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff3dbd6e20 a2=0 a3=7fff3dbd6e0c items=0 ppid=3675 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.640805] audit: type=1327 audit(1779813968.419:2783): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 169.657084] audit: type=1325 audit(1779813968.446:2784): table=nat:158 family=2 entries=18 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 169.662571] audit: type=1300 audit(1779813968.446:2784): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fff3dbd6e20 a2=0 a3=0 items=0 ppid=3675 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.669425] audit: type=1327 audit(1779813968.446:2784): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 169.849869] audit: type=1106 audit(1779813968.639:2785): pid=4893 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.857000] audit: type=1104 audit(1779813968.639:2786): pid=4893 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.863994] audit: type=1131 audit(1779813968.642:2787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4104-172.31.17.158:22-50.85.169.122:37902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.022478] audit: type=1130 audit(1779813968.812:2788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4105-172.31.17.158:22-50.85.169.122:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.634041] kauditd_printk_skb: 27 callbacks suppressed [ 175.634045] audit: type=1325 audit(1779813974.423:2808): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 175.638543] audit: type=1300 audit(1779813974.423:2808): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffee061a910 a2=0 a3=7ffee061a8fc items=0 ppid=3675 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.644495] audit: type=1327 audit(1779813974.423:2808): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 175.648527] audit: type=1325 audit(1779813974.437:2809): table=nat:162 family=2 entries=102 op=nft_register_chain pid=4946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 175.651478] audit: type=1300 audit(1779813974.437:2809): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffee061a910 a2=0 a3=7ffee061a8fc items=0 ppid=3675 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.660826] audit: type=1327 audit(1779813974.437:2809): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.458924] audit: type=1130 audit(1779813977.248:2810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4106-172.31.17.158:22-50.85.169.122:51146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.335659] audit: type=1101 audit(1779813978.125:2811): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.341679] audit: type=1103 audit(1779813978.127:2812): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.348482] audit: type=1006 audit(1779813978.127:2813): pid=4948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 185.076827] kauditd_printk_skb: 7 callbacks suppressed [ 185.076830] audit: type=1130 audit(1779813983.866:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-172.31.17.158:22-50.85.169.122:51162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.931722] audit: type=1101 audit(1779813984.721:2820): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 185.938134] audit: type=1103 audit(1779813984.723:2821): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 185.944356] audit: type=1006 audit(1779813984.723:2822): pid=4964 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 185.947678] audit: type=1300 audit(1779813984.723:2822): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb3b9e5b0 a2=3 a3=0 items=0 ppid=1 pid=4964 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.953714] audit: type=1327 audit(1779813984.723:2822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.960070] audit: type=1105 audit(1779813984.749:2823): pid=4964 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 185.966629] audit: type=1103 audit(1779813984.754:2824): pid=4968 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.484565] audit: type=1106 audit(1779813985.273:2825): pid=4964 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.491889] audit: type=1104 audit(1779813985.273:2826): pid=4964 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:46:29 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 191.312880] kauditd_printk_skb: 17 callbacks suppressed [ 191.312884] audit: type=1106 audit(1779813990.102:2842): pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 191.321696] audit: type=1104 audit(1779813990.103:2843): pid=4980 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 191.327454] audit: type=1131 audit(1779813990.107:2844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-11-172.31.17.158:22-50.85.169.122:51174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.481311] audit: type=1130 audit(1779813990.271:2845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4107-172.31.17.158:22-50.85.169.122:48638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.361277] audit: type=1101 audit(1779813991.151:2846): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.367310] audit: type=1103 audit(1779813991.153:2847): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.372874] audit: type=1006 audit(1779813991.153:2848): pid=5126 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 192.376584] audit: type=1300 audit(1779813991.153:2848): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe59ed3c90 a2=3 a3=0 items=0 ppid=1 pid=5126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.382529] audit: type=1327 audit(1779813991.153:2848): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 192.390524] audit: type=1105 audit(1779813991.180:2849): pid=5126 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.354911] kauditd_printk_skb: 102 callbacks suppressed [ 196.354916] audit: type=1101 audit(1779813995.144:2898): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.368814] audit: type=1103 audit(1779813995.148:2899): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.377329] audit: type=1006 audit(1779813995.148:2900): pid=5289 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 196.382136] audit: type=1300 audit(1779813995.148:2900): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffcbb5b680 a2=3 a3=0 items=0 ppid=1 pid=5289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.388552] audit: type=1327 audit(1779813995.148:2900): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.395134] audit: type=1105 audit(1779813995.183:2901): pid=5289 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.401706] audit: type=1103 audit(1779813995.187:2902): pid=5332 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.042544] audit: type=1334 audit(1779813995.832:2903): prog-id=1263 op=LOAD [ 197.045049] audit: type=1334 audit(1779813995.834:2904): prog-id=1264 op=LOAD [ 197.046613] audit: type=1300 audit(1779813995.834:2904): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=5155 pid=5338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.002398] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 201.512504] kauditd_printk_skb: 5799 callbacks suppressed [ 201.512507] audit: type=1415 audit(1779814000.302:4841): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=192.168.0.195 dst=192.168.1.153 spi=3(0x3) res=1 [ 201.516886] audit: type=1300 audit(1779814000.302:4841): arch=c000003e syscall=44 success=yes exit=364 a0=1a a1=c00092d500 a2=16c a3=0 items=0 ppid=5155 pid=5390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.522740] audit: type=1327 audit(1779814000.302:4841): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 201.525751] audit: type=1415 audit(1779814000.302:4842): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 201.529837] audit: type=1300 audit(1779814000.302:4842): arch=c000003e syscall=44 success=yes exit=264 a0=1a a1=c00038b200 a2=108 a3=0 items=0 ppid=5155 pid=5390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.535886] audit: type=1327 audit(1779814000.302:4842): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 201.539319] audit: type=1415 audit(1779814000.302:4843): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=0.0.0.0 dst=192.168.0.195 spi=3(0x3) res=1 [ 201.542745] audit: type=1300 audit(1779814000.302:4843): arch=c000003e syscall=44 success=yes exit=364 a0=1a a1=c00092d680 a2=16c a3=0 items=0 ppid=5155 pid=5390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.549342] audit: type=1327 audit(1779814000.302:4843): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 201.552529] audit: type=1415 audit(1779814000.302:4844): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 This is ip-172-31-17-158 (Linux x86_64 6.12.91-flatcar) 16:46:43 SSH host key: SHA256:/tNskEZfnEn1+xo2siMc8x4zinLeBgHiFkT8imCTRyo (ED25519) SSH host key: SHA256:1Umc/tFch5InxfKhmPgDyRhB0wNBYrXb+SUIS7Uuk6A (ECDSA) SSH host key: SHA256:AShZjcWfwOaMd8nCZUAEKBZGF+8XmvJjUK0PH2U70do (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.17.158 fe80::4bb:fff:fefe:2bf5 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-17-158 login: [ 207.520076] kauditd_printk_skb: 486 callbacks suppressed [ 207.520081] audit: type=1334 audit(1779814006.309:5013): prog-id=2256 op=LOAD [ 207.523403] audit: type=1334 audit(1779814006.311:5014): prog-id=2257 op=LOAD [ 207.524912] audit: type=1300 audit(1779814006.311:5014): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc30252290 a2=74 a3=7ffc30252290 items=0 ppid=5390 pid=6020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.531387] audit: type=1327 audit(1779814006.311:5014): proctitle=74630066696C746572007265706C61636500646576006C786333663737303230646138663700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003237305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 207.535786] audit: type=1334 audit(1779814006.312:5015): prog-id=2257 op=UNLOAD [ 207.537074] audit: type=1300 audit(1779814006.312:5015): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc30252290 a2=74 a3=7ffc30252290 items=0 ppid=5390 pid=6020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.542421] audit: type=1327 audit(1779814006.312:5015): proctitle=74630066696C746572007265706C61636500646576006C786333663737303230646138663700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003237305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 207.546800] audit: type=1334 audit(1779814006.312:5016): prog-id=2258 op=LOAD [ 207.548118] audit: type=1300 audit(1779814006.312:5016): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc30252220 a2=80 a3=0 items=0 ppid=5390 pid=6020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.553206] audit: type=1327 audit(1779814006.312:5016): proctitle=74630066696C746572007265706C61636500646576006C786333663737303230646138663700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003237305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 224.565425] kauditd_printk_skb: 423 callbacks suppressed [ 224.565430] audit: type=1334 audit(1779814023.354:5162): prog-id=81 op=UNLOAD [ 224.570115] audit: type=1334 audit(1779814023.354:5163): prog-id=116 op=UNLOAD [ 225.179370] audit: type=1334 audit(1779814023.969:5164): prog-id=2334 op=LOAD [ 225.181522] audit: type=1334 audit(1779814023.970:5165): prog-id=2335 op=LOAD [ 225.183683] audit: type=1300 audit(1779814023.970:5165): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=2938 pid=6088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.189198] audit: type=1327 audit(1779814023.970:5165): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266326336653762396635653732386138336339303430623539623935 [ 225.194459] audit: type=1334 audit(1779814023.971:5166): prog-id=2335 op=UNLOAD [ 225.196295] audit: type=1300 audit(1779814023.971:5166): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=2938 pid=6088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.202494] audit: type=1327 audit(1779814023.971:5166): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266326336653762396635653732386138336339303430623539623935 [ 225.208754] audit: type=1334 audit(1779814023.971:5167): prog-id=2336 op=LOAD