projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
https://docs.projectdiscovery.io/tools/nuclei
MIT License
20.6k stars 2.51k forks source link

Nuclei Crash #3549

Closed mattstorey001 closed 1 year ago

mattstorey001 commented 1 year ago

Nuclei version:

└─$ nuclei -version

[INF] Current Version: 2.9.1

Current Behavior:

Crash without completion due to memory.

Expected Behavior:

Scan completion

Steps To Reproduce:

approx 40-50 domains under subfinder.

subfinder -d domain.com | nuclei -sa -t $PWD/.local/nuclei-templates -no-strict-syntax -severity critical,high,medium -interactions-cache-size 5000 -interactions-eviction 60 -interactions-poll-duration 5 -interactions-cooldown-period 5 -max-host-error 5 -ts -debug -tlog trace.log -elog error.log -hm -vv -o vulns.log -sc

Anything else:

zsh: killed     nuclei -sa -t $PWD/.local/nuclei-templates -no-strict-syntax -severity   5000
dmesg output ┌──(kali㉿kali)-[~] └─$ dmesg [ 0.000000] Linux version 6.1.0-kali5-cloud-amd64 (devel@kali.org) (gcc-12 (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DC Debian 6.1.12-1kali2 (2023-02-23) [ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-6.1.0-kali5-cloud-amd64 root=UUID=7c06256c-a216-4010-8656-426df806b511 ro console=tty0 console=ttyS0,11520lyprintk=ttyS0,115200 consoleblank=0 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] signal: max sigframe size: 1776 [ 0.000000] BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009dfff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009e000-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000003fffffff] usable [ 0.000000] BIOS-e820: [mem 0x00000000fc000000-0x00000000ffffffff] reserved [ 0.000000] printk: bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.7 present. [ 0.000000] DMI: Xen HVM domU, BIOS 4.11.amazon 08/24/2006 [ 0.000000] Hypervisor detected: Xen HVM [ 0.000000] Xen version 4.11. [ 0.000000] platform_pci_unplug: Netfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated NICs. [ 0.000000] platform_pci_unplug: Blkfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated disks. You might have to change the root device from /dev/hd[a-d] to /dev/xvd[a-d] in your root= kernel command line option [ 0.000009] HVMOP_pagetable_dying not supported [ 0.022123] tsc: Fast TSC calibration using PIT [ 0.025166] tsc: Detected 2400.035 MHz processor [ 0.028144] tsc: Detected 2400.010 MHz TSC [ 0.028588] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.030996] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.031003] last_pfn = 0x40000 max_arch_pfn = 0x400000000 [ 0.038016] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.052317] RAMDISK: [mem 0x3585d000-0x36c25fff] [ 0.055055] ACPI: Early table checksum verification disabled [ 0.058255] ACPI: RSDP 0x00000000000EA020 000024 (v02 Xen ) [ 0.061558] ACPI: XSDT 0x00000000FC00C780 000054 (v01 Xen HVM 00000000 HVML 00000000) [ 0.066161] ACPI: FACP 0x00000000FC00C440 0000F4 (v04 Xen HVM 00000000 HVML 00000000) [ 0.070695] ACPI: DSDT 0x00000000FC003940 008A7E (v02 Xen HVM 00000000 INTL 20090123) [ 0.075139] ACPI: FACS 0x00000000FC003900 000040 [ 0.077593] ACPI: FACS 0x00000000FC003900 000040 [ 0.080266] ACPI: APIC 0x00000000FC00C540 0000D8 (v02 Xen HVM 00000000 HVML 00000000) [ 0.084869] ACPI: HPET 0x00000000FC00C690 000038 (v01 Xen HVM 00000000 HVML 00000000) [ 0.089489] ACPI: WAET 0x00000000FC00C6D0 000028 (v01 Xen HVM 00000000 HVML 00000000) [ 0.094304] ACPI: SSDT 0x00000000FC00C700 000031 (v02 Xen HVM 00000000 INTL 20090123) [ 0.099270] ACPI: SSDT 0x00000000FC00C740 000033 (v02 Xen HVM 00000000 INTL 20090123) [ 0.104471] ACPI: Reserving FACP table memory at [mem 0xfc00c440-0xfc00c533] [ 0.108768] ACPI: Reserving DSDT table memory at [mem 0xfc003940-0xfc00c3bd] [ 0.113002] ACPI: Reserving FACS table memory at [mem 0xfc003900-0xfc00393f] [ 0.117403] ACPI: Reserving FACS table memory at [mem 0xfc003900-0xfc00393f] [ 0.121508] ACPI: Reserving APIC table memory at [mem 0xfc00c540-0xfc00c617] [ 0.125410] ACPI: Reserving HPET table memory at [mem 0xfc00c690-0xfc00c6c7] [ 0.129133] ACPI: Reserving WAET table memory at [mem 0xfc00c6d0-0xfc00c6f7] [ 0.132888] ACPI: Reserving SSDT table memory at [mem 0xfc00c700-0xfc00c730] [ 0.137326] ACPI: Reserving SSDT table memory at [mem 0xfc00c740-0xfc00c772] [ 0.142941] No NUMA configuration found [ 0.145156] Faking a node at [mem 0x0000000000000000-0x000000003fffffff] [ 0.148851] NODE_DATA(0) allocated [mem 0x3ffd5000-0x3fffffff] [ 0.152221] Zone ranges: [ 0.153684] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.157185] DMA32 [mem 0x0000000001000000-0x000000003fffffff] [ 0.160575] Normal empty [ 0.162132] Device empty [ 0.163672] Movable zone start for each node [ 0.166039] Early memory node ranges [ 0.167967] node 0: [mem 0x0000000000001000-0x000000000009dfff] [ 0.171492] node 0: [mem 0x0000000000100000-0x000000003fffffff] [ 0.175274] Initmem setup node 0 [mem 0x0000000000001000-0x000000003fffffff] [ 0.179137] On node 0, zone DMA: 1 pages in unavailable ranges [ 0.179210] On node 0, zone DMA: 98 pages in unavailable ranges [ 0.184954] ACPI: PM-Timer IO Port: 0xb008 [ 0.190490] IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-47 [ 0.194474] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.198500] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 low level) [ 0.202608] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 low level) [ 0.206734] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 low level) [ 0.210632] ACPI: Using ACPI (MADT) for SMP configuration information [ 0.214285] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.217058] TSC deadline timer available [ 0.219162] smpboot: Allowing 15 CPUs, 14 hotplug CPUs [ 0.221973] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.226174] PM: hibernation: Registered nosave memory: [mem 0x0009e000-0x0009ffff] [ 0.230395] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000dffff] [ 0.234570] PM: hibernation: Registered nosave memory: [mem 0x000e0000-0x000fffff] [ 0.238713] [mem 0x40000000-0xfbffffff] available for PCI devices [ 0.241978] Booting paravirtualized kernel on Xen HVM [ 0.244921] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns [ 0.254957] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:15 nr_cpu_ids:15 nr_node_ids:1 [ 0.260293] percpu: Embedded 61 pages/cpu s212992 r8192 d28672 u262144 [ 0.263819] pcpu-alloc: s212992 r8192 d28672 u262144 alloc=1*2097152 [ 0.263823] pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 -- [ 0.263858] xen: PV spinlocks enabled [ 0.263861] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.267805] Fallback order for Node 0: 0 [ 0.270097] Built 1 zonelists, mobility grouping on. Total pages: 257792 [ 0.273984] Policy zone: DMA32 [ 0.275838] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.1.0-kali5-cloud-amd64 root=UUID=7c06256c-a216-4010-8656-426df806b511 ro console=tty0 console=ttyS200 earlyprintk=ttyS0,115200 consoleblank=0 [ 0.286359] Unknown kernel command line parameters "BOOT_IMAGE=/boot/vmlinuz-6.1.0-kali5-cloud-amd64", will be passed to user space. [ 0.292824] random: crng init done [ 0.294964] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) [ 0.300757] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 0.305417] mem auto-init: stack:all(zero), heap alloc:on, heap free:off [ 0.311623] Memory: 260860K/1048180K available (12295K kernel code, 2314K rwdata, 16664K rodata, 2552K init, 3548K bss, 87824K reserved, 0K cma-reserved) [ 0.319663] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=15, Nodes=1 [ 0.323500] Kernel/User page tables isolation: enabled [ 0.327131] ftrace: allocating 37147 entries in 146 pages [ 0.337666] ftrace: allocated 146 pages with 3 groups [ 0.341421] Dynamic Preempt: voluntary [ 0.343682] rcu: Preemptible hierarchical RCU implementation. [ 0.347185] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=15. [ 0.351072] Trampoline variant of Tasks RCU enabled. [ 0.353892] Rude variant of Tasks RCU enabled. [ 0.356549] Tracing variant of Tasks RCU enabled. [ 0.359111] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. [ 0.363227] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=15 [ 0.372023] NR_IRQS: 524544, nr_irqs: 952, preallocated irqs: 16 [ 0.377419] xen:events: Using 2-level ABI [ 0.380999] xen:events: Xen HVM callback vector for event delivery is enabled [ 0.387660] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.471555] Console: colour VGA+ 80x25 [ 0.592625] printk: console [tty0] enabled [ 0.597253] Cannot get hvm parameter CONSOLE_EVTCHN (18): -22! [ 0.603394] printk: console [ttyS0] enabled [ 0.610141] printk: bootconsole [earlyser0] disabled [ 0.616373] ACPI: Core revision 20220331 [ 0.622909] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns [ 0.632392] APIC: Switch to symmetric I/O mode setup [ 0.638479] x2apic enabled [ 0.642680] Switched APIC routing to physical x2apic. [ 0.650890] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=0 pin2=0 [ 0.673578] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x229840d1729, max_idle_ns: 440795276167 ns [ 0.682652] Calibrating delay loop (skipped), value calculated using timer frequency.. 4800.02 BogoMIPS (lpj=9600040) [ 0.691899] pid_max: default: 32768 minimum: 301 [ 0.695500] LSM: Security Framework initializing [ 0.699445] landlock: Up and running. [ 0.703371] Yama: disabled by default; enable with sysctl kernel.yama.* [ 0.707562] AppArmor: AppArmor initialized [ 0.711750] TOMOYO Linux initialized [ 0.715516] LSM support for eBPF active [ 0.719783] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.730652] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.743749] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 0.747768] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 0.755497] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 0.763741] Spectre V2 : Mitigation: Retpolines [ 0.767531] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 0.780132] Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT [ 0.787641] Speculative Store Bypass: Vulnerable [ 0.791468] MDS: Vulnerable: Clear CPU buffers attempted, no microcode [ 0.799724] MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode [ 0.824420] clocksource: xen: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.831899] Xen: using vcpuop timer interface [ 0.831907] installing Xen timer for CPU 0 [ 0.835837] smpboot: CPU0: Intel(R) Xeon(R) CPU E5-2676 v3 @ 2.40GHz (family: 0x6, model: 0x3f, stepping: 0x2) [ 0.840008] cpu 0 spinlock event irq 53 [ 0.843774] cblist_init_generic: Setting adjustable number of callback queues. [ 0.846654] cblist_init_generic: Setting shift to 4 and lim to 1. [ 0.851650] cblist_init_generic: Setting shift to 4 and lim to 1. [ 0.855592] cblist_init_generic: Setting shift to 4 and lim to 1. [ 0.859785] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 0.864054] rcu: Hierarchical SRCU implementation. [ 0.867708] rcu: Max phase no-delay instances is 1000. [ 0.871989] NMI watchdog: Perf NMI watchdog permanently disabled [ 0.875933] smp: Bringing up secondary CPUs ... [ 0.879560] smp: Brought up 1 node, 1 CPU [ 0.886660] smpboot: Max logical packages: 15 [ 0.890449] smpboot: Total of 1 processors activated (4800.02 BogoMIPS) [ 0.898265] node 0 deferred pages initialised in 0ms [ 0.899981] devtmpfs: initialized [ 0.903691] x86/mm: Memory block size: 128MB [ 0.907854] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.911778] futex hash table entries: 4096 (order: 6, 262144 bytes, linear) [ 0.916371] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.919644] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations [ 0.923557] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations [ 0.927796] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations [ 0.931951] audit: initializing netlink subsys (disabled) [ 0.935809] thermal_sys: Registered thermal governor 'fair_share' [ 0.935811] thermal_sys: Registered thermal governor 'bang_bang' [ 0.939647] thermal_sys: Registered thermal governor 'step_wise' [ 0.943512] audit: type=2000 audit(1681490476.352:1): state=initialized audit_enabled=0 res=1 [ 0.951704] thermal_sys: Registered thermal governor 'user_space' [ 0.951706] thermal_sys: Registered thermal governor 'power_allocator' [ 0.955505] cpuidle: using governor ladder [ 0.962657] cpuidle: using governor menu [ 0.966713] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.971918] PCI: Using configuration type 1 for base access [ 0.976450] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. [ 1.008163] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages [ 1.011700] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page [ 1.015880] ACPI: Added _OSI(Module Device) [ 1.018654] ACPI: Added _OSI(Processor Device) [ 1.022361] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.023688] ACPI: Added _OSI(Processor Aggregator Device) [ 1.033409] ACPI: 3 ACPI AML tables successfully acquired and loaded [ 1.036661] xen: --> pirq=16 -> irq=9 (gsi=9) [ 1.037760] ACPI: Interpreter enabled [ 1.039940] ACPI: PM: (supports S0 S3 S4 S5) [ 1.043478] ACPI: Using IOAPIC for interrupt routing [ 1.047547] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.051741] PCI: Using E820 reservations for host bridge windows [ 1.056048] ACPI: Enabled 2 GPEs in block 00 to 0F [ 1.082435] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.083682] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] [ 1.087983] acpi PNP0A03:00: _OSC: not requesting OS control; OS requires [ExtendedConfig ASPM ClockPM MSI] [ 1.092286] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 1.101415] acpiphp: Slot [0] registered [ 1.105862] acpiphp: Slot [3] registered [ 1.108349] acpiphp: Slot [4] registered [ 1.112711] acpiphp: Slot [5] registered [ 1.116100] acpiphp: Slot [6] registered [ 1.120106] acpiphp: Slot [7] registered [ 1.124280] acpiphp: Slot [8] registered [ 1.128099] acpiphp: Slot [9] registered [ 1.132190] acpiphp: Slot [10] registered [ 1.136210] acpiphp: Slot [11] registered [ 1.140191] acpiphp: Slot [12] registered [ 1.144141] acpiphp: Slot [13] registered [ 1.148109] acpiphp: Slot [14] registered [ 1.152158] acpiphp: Slot [15] registered [ 1.156157] acpiphp: Slot [16] registered [ 1.160388] acpiphp: Slot [17] registered [ 1.164242] acpiphp: Slot [18] registered [ 1.168579] acpiphp: Slot [19] registered [ 1.172603] acpiphp: Slot [20] registered [ 1.176486] acpiphp: Slot [21] registered [ 1.180401] acpiphp: Slot [22] registered [ 1.184567] acpiphp: Slot [23] registered [ 1.188475] acpiphp: Slot [24] registered [ 1.192451] acpiphp: Slot [25] registered [ 1.196498] acpiphp: Slot [26] registered [ 1.200543] acpiphp: Slot [27] registered [ 1.204446] acpiphp: Slot [28] registered [ 1.208147] acpiphp: Slot [29] registered [ 1.212158] acpiphp: Slot [30] registered [ 1.216109] acpiphp: Slot [31] registered [ 1.220192] PCI host bridge to bus 0000:00 [ 1.223602] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.227680] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.231724] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.236071] pci_bus 0000:00: root bus resource [mem 0xf0000000-0xfbffffff window] [ 1.240102] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.244392] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1.251949] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 1.260475] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 1.266300] pci 0000:00:01.1: reg 0x20: [io 0xc100-0xc10f] [ 1.268776] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 1.271797] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 1.275694] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 1.279909] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 1.284967] * Found PM-Timer Bug on the chipset. Due to workarounds for a bug, * this clock source is slow. Consider trying other clock sources [ 1.288322] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 1.294322] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 1.297661] pci 0000:00:02.0: [1013:00b8] type 00 class 0x030000 [ 1.300413] pci 0000:00:02.0: reg 0x10: [mem 0xf0000000-0xf1ffffff pref] [ 1.304262] pci 0000:00:02.0: reg 0x14: [mem 0xf3000000-0xf3000fff] [ 1.310396] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1.313049] pci 0000:00:03.0: [5853:0001] type 00 class 0xff8000 [ 1.316691] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc0ff] [ 1.319827] pci 0000:00:03.0: reg 0x14: [mem 0xf2000000-0xf2ffffff pref] [ 1.327444] ACPI: PCI: Interrupt link LNKA configured for IRQ 5 [ 1.332151] ACPI: PCI: Interrupt link LNKB configured for IRQ 10 [ 1.335752] ACPI: PCI: Interrupt link LNKC configured for IRQ 11 [ 1.340129] ACPI: PCI: Interrupt link LNKD configured for IRQ 5 [ 1.356200] xen:balloon: Initialising balloon driver [ 1.359560] iommu: Default domain type: Translated [ 1.363419] iommu: DMA domain TLB invalidation policy: lazy mode [ 1.367970] NetLabel: Initializing [ 1.371522] NetLabel: domain hash size = 128 [ 1.375421] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 1.379581] NetLabel: unlabeled traffic allowed by default [ 1.383475] PCI: Using ACPI for IRQ routing [ 1.386655] PCI: pci_cache_line_size set to 64 bytes [ 1.387242] e820: reserve RAM buffer [mem 0x0009e000-0x0009ffff] [ 1.387351] pci 0000:00:02.0: vgaarb: setting as boot VGA device [ 1.390647] pci 0000:00:02.0: vgaarb: bridge control possible [ 1.390647] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1.390653] vgaarb: loaded [ 1.394133] hpet: 3 channels of 0 reserved for per-cpu timers [ 1.395835] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 1.399592] hpet0: 3 comparators, 64-bit 62.500000 MHz counter [ 1.406686] clocksource: Switched to clocksource xen [ 1.422116] VFS: Disk quotas dquot_6.6.0 [ 1.427240] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 1.436885] AppArmor: AppArmor Filesystem Enabled [ 1.443916] pnp: PnP ACPI init [ 1.449131] system 00:00: [mem 0x00000000-0x0009ffff] could not be reserved [ 1.458960] system 00:01: [io 0x08a0-0x08a3] has been reserved [ 1.467415] system 00:01: [io 0x0cc0-0x0ccf] has been reserved [ 1.475521] system 00:01: [io 0x04d0-0x04d1] has been reserved [ 1.483622] xen: --> pirq=17 -> irq=8 (gsi=8) [ 1.483674] xen: --> pirq=18 -> irq=12 (gsi=12) [ 1.483707] xen: --> pirq=19 -> irq=1 (gsi=1) [ 1.483740] xen: --> pirq=20 -> irq=6 (gsi=6) [ 1.483742] pnp 00:05: [dma 2] [ 1.483784] xen: --> pirq=21 -> irq=4 (gsi=4) [ 1.483869] system 00:07: [io 0x10c0-0x1141] has been reserved [ 1.491987] system 00:07: [io 0xb044-0xb047] has been reserved [ 1.513909] pnp: PnP ACPI: found 8 devices [ 1.525756] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 1.537722] NET: Registered PF_INET protocol family [ 1.543044] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 1.549882] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear) [ 1.557164] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 1.563614] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 1.570246] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear) [ 1.578092] TCP: Hash tables configured (established 8192 bind 8192) [ 1.584367] MPTCP token hash table entries: 1024 (order: 2, 24576 bytes, linear) [ 1.590567] UDP hash table entries: 512 (order: 2, 16384 bytes, linear) [ 1.596043] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear) [ 1.602118] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 1.607319] NET: Registered PF_XDP protocol family [ 1.611629] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 1.616979] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 1.622191] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 1.628222] pci_bus 0000:00: resource 7 [mem 0xf0000000-0xfbffffff window] [ 1.636813] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 1.644684] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 1.653298] PCI: CLS 0 bytes, default 64 [ 1.659164] Trying to unpack rootfs image as initramfs... [ 1.666700] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x229840d1729, max_idle_ns: 440795276167 ns [ 1.691158] Initialise system trusted keyrings [ 1.702728] Key type blacklist registered [ 1.718792] workingset: timestamp_bits=36 max_order=18 bucket_order=0 [ 1.736611] integrity: Platform Keyring initialized [ 1.750850] integrity: Machine keyring initialized [ 1.762734] Key type asymmetric registered [ 1.774752] Asymmetric key parser 'x509' registered [ 2.032154] Freeing initrd memory: 20260K [ 2.041460] alg: self-tests for CTR-KDF (hmac(sha256)) passed [ 2.175182] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 2.181137] io scheduler mq-deadline registered [ 2.191147] xen: --> pirq=22 -> irq=28 (gsi=28) [ 2.191302] xen:grant_table: Grant tables using version 1 layout [ 2.197075] Grant table initialized [ 2.200826] Cannot get hvm parameter CONSOLE_EVTCHN (18): -22! [ 2.206607] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.213555] 00:06: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.233531] i8042: PNP: PS/2 Controller [PNP0303:PS2K,PNP0f13:PS2M] at 0x60,0x64 irq 1,12 [ 2.242243] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 2.246454] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 2.251809] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 [ 2.258783] rtc_cmos 00:02: registered as rtc0 [ 2.263058] rtc_cmos 00:02: setting system clock to 2023-04-14T16:41:18 UTC (1681490478) [ 2.270142] rtc_cmos 00:02: alarms up to one day, 114 bytes nvram, hpet irqs [ 2.276506] intel_pstate: CPU model not supported [ 2.281033] ledtrig-cpu: registered to indicate activity on CPUs [ 2.325186] NET: Registered PF_INET6 protocol family [ 2.334470] Segment Routing with IPv6 [ 2.338360] In-situ OAM (IOAM) with IPv6 [ 2.341987] mip6: Mobile IPv6 [ 2.345602] NET: Registered PF_PACKET protocol family [ 2.350201] resctrl: L3 allocation detected [ 2.354773] IPI shorthand broadcast: enabled [ 2.358911] sched_clock: Marking stable (2122345115, 236519874)->(2902924715, -544059726) [ 2.366984] registered taskstats version 1 [ 2.371937] Loading compiled-in X.509 certificates [ 2.459038] Loaded X.509 cert 'Debian Secure Boot CA: 6ccece7e4c6c0d1f6149f3dd27dfcc5cbb419ea1' [ 2.467810] Loaded X.509 cert 'Debian Secure Boot Signer 2022 - linux: 14011249c2675ea8e5148542202005810584b25f' [ 2.477450] Key type .fscrypt registered [ 2.481791] Key type fscrypt-provisioning registered [ 2.490749] Key type encrypted registered [ 2.494947] AppArmor: AppArmor sha1 policy hashing enabled [ 2.500291] ima: No TPM chip found, activating TPM-bypass! [ 2.505739] ima: Allocated hash algorithm: sha256 [ 2.510488] ima: No architecture policies found [ 2.515220] evm: Initialising EVM extended attributes: [ 2.520519] evm: security.selinux [ 2.524731] evm: security.SMACK64 (disabled) [ 2.529068] evm: security.SMACK64EXEC (disabled) [ 2.533789] evm: security.SMACK64TRANSMUTE (disabled) [ 2.538820] evm: security.SMACK64MMAP (disabled) [ 2.542695] evm: security.apparmor [ 2.545650] evm: security.ima [ 2.548399] evm: security.capability [ 2.551638] evm: HMAC attrs: 0x1 [ 2.658186] xenbus_probe_frontend: Device with no driver: device/vbd/51712 [ 2.663800] xenbus_probe_frontend: Device with no driver: device/vif/0 [ 2.671917] Freeing unused decrypted memory: 2036K [ 2.675302] Freeing unused kernel image (initmem) memory: 2552K [ 2.678677] Write protecting the kernel read-only data: 32768k [ 2.682756] Freeing unused kernel image (text/rodata gap) memory: 2040K [ 2.686752] Freeing unused kernel image (rodata/data gap) memory: 1768K [ 2.692244] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2.695896] x86/mm: Checking user space page tables [ 2.698989] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2.702589] Run /init as init process [ 2.705868] with arguments: [ 2.705870] /init [ 2.705871] with environment: [ 2.705872] HOME=/ [ 2.705873] TERM=linux [ 2.705874] BOOT_IMAGE=/boot/vmlinuz-6.1.0-kali5-cloud-amd64 [ 2.850381] xen_netfront: Initialising Xen virtual ethernet driver [ 2.857801] Invalid max_queues (4), will use default max: 1. [ 2.866343] SCSI subsystem initialized [ 2.894746] libata version 3.00 loaded. [ 2.895619] ata_piix 0000:00:01.1: version 2.13 [ 2.897418] scsi host0: ata_piix [ 2.900969] scsi host1: ata_piix [ 2.905677] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc100 irq 14 [ 2.911549] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc108 irq 15 [ 2.923635] blkfront: xvda: barrier or flush: disabled; persistent grants: disabled; indirect descriptors: enabled; bounce buffer: disabled; [ 3.046780] xvda: xvda1 xvda14 xvda15 [ 4.033209] EXT4-fs (xvda1): mounted filesystem with ordered data mode. Quota mode: none. [ 4.742944] Not activating Mandatory Access Control as /sbin/tomoyo-init does not exist. [ 10.159638] systemd[1]: Inserted module 'autofs4' [ 10.382404] systemd[1]: systemd 252.5-2 running in system mode (+PAM +AUDIT +SELINUX +APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURFUTILS +FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +USYSVINIT default-hierarchy=unified) [ 10.401620] systemd[1]: Detected virtualization xen. [ 10.406239] systemd[1]: Detected architecture x86-64. [ 10.549201] systemd[1]: Hostname set to . [ 10.553875] systemd[1]: Initializing machine ID from random generator. [ 10.558580] systemd[1]: Installed transient /etc/machine-id file. [ 13.412555] systemd[1]: Condition check resulted in system.slice - System Slice being skipped. [ 13.419252] systemd[1]: Condition check resulted in -.slice - Root Slice being skipped. [ 13.425535] systemd[1]: Queued start job for default target graphical.target. [ 13.443659] systemd[1]: Created slice system-getty.slice - Slice /system/getty. [ 13.453503] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. [ 13.464413] systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. [ 13.476847] systemd[1]: Created slice system-systemd\x2dgrowfs.slice - Slice /system/systemd-growfs. [ 13.488412] systemd[1]: Created slice user.slice - User and Session Slice. [ 13.498357] systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. [ 13.510781] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 13.523734] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 13.537910] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 13.548052] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 13.558421] systemd[1]: Reached target paths.target - Path Units. [ 13.568747] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 13.584031] systemd[1]: Reached target slices.target - Slice Units. [ 13.595086] systemd[1]: Reached target swap.target - Swaps. [ 13.604574] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 13.616541] systemd[1]: Listening on syslog.socket - Syslog Socket. [ 13.640784] systemd[1]: Listening on systemd-fsckd.socket - fsck to fsckd communication Socket. [ 13.656046] systemd[1]: Listening on systemd-initctl.socket - initctl Compatibility Named Pipe. [ 13.668283] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 13.677302] systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). [ 13.688306] systemd[1]: Listening on systemd-journald.socket - Journal Socket. [ 13.697520] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 13.709155] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. [ 13.734738] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 13.746033] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 13.755544] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 13.765654] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 13.776995] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 13.790887] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 13.804776] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 13.817319] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... [ 13.845657] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 13.856933] systemd[1]: systemd-fsck-root.service - File System Check on Root Device was skipped because of an unmet condition check (ConditionPathExists=!/ritramfs/fsck-root). [ 13.867351] systemd[1]: Starting systemd-journald.service - Journal Service... [ 13.881377] fuse: init (API version 7.37) [ 13.899492] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 13.913524] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 13.931742] systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. [ 13.941265] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 13.960491] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 13.969707] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 13.978783] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 13.987633] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 13.997045] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 14.015156] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 14.034981] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 14.040625] EXT4-fs (xvda1): re-mounted. Quota mode: none. [ 14.231963] systemd[1]: modprobe@drm.service: Deactivated successfully. [ 14.237982] systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. [ 14.248976] systemd[1]: Started systemd-journald.service - Journal Service. [ 14.389640] systemd-journald[203]: Received client request to flush runtime journal. [ 14.770795] EXT4-fs (xvda1): resizing filesystem from 3112704 to 3112704 blocks [ 15.778811] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 15.798789] ACPI: button: Power Button [PWRF] [ 15.802875] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 [ 15.807849] ACPI: button: Sleep Button [SLPF] [ 16.292415] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 655360 ms ovfl timer [ 16.386564] cryptd: max_cpu_qlen set to 1000 [ 16.605694] AVX2 version of gcm_enc/dec engaged. [ 16.611083] AES CTR mode by8 optimization enabled [ 32.132128] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. [ 32.139047] device-mapper: uevent: version 1.0.3 [ 32.143239] device-mapper: ioctl: 4.47.0-ioctl (2022-07-28) initialised: dm-devel@redhat.com [ 1035.930841] RPC: Registered named UNIX socket transport module. [ 1035.934939] RPC: Registered udp transport module. [ 1035.940395] RPC: Registered tcp transport module. [ 1035.945905] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 1039.554248] audit: type=1400 audit(1681491515.784:2): apparmor="STATUS" operation="profile_remove" info="profile does not exist" error=-2 profile="unconfinede="/usr/sbin/mariadbd" pid=33345 comm="apparmor_parser" [ 1143.739734] audit: type=1400 audit(1681491619.972:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=36348 comm="aor_parser" [36808.442372] systemd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [36808.485697] CPU: 0 PID: 1 Comm: systemd Not tainted 6.1.0-kali5-cloud-amd64 #1 Debian 6.1.12-1kali2 [36808.492037] Hardware name: Xen HVM domU, BIOS 4.11.amazon 08/24/2006 [36808.508854] Call Trace: [36808.519317] [36808.521621] dump_stack_lvl+0x44/0x5c [36808.524726] dump_header+0x4a/0x211 [36808.535901] oom_kill_process.cold+0xb/0x10 [36808.539172] out_of_memory+0x1fd/0x4c0 [36808.551699] __alloc_pages_slowpath.constprop.0+0xc73/0xdc0 [36808.563819] __alloc_pages+0x305/0x330 [36808.566728] folio_alloc+0x17/0x50 [36808.569442] __filemap_get_folio+0x155/0x340 [36808.584787] filemap_fault+0x139/0x910 [36808.595738] __do_fault+0x31/0x80 [36808.598432] do_fault+0x1b9/0x410 [36808.601281] __handle_mm_fault+0x660/0xfa0 [36808.612450] handle_mm_fault+0xdb/0x2d0 [36808.623439] do_user_addr_fault+0x1c5/0x660 [36808.626563] exc_page_fault+0x70/0x170 [36808.637514] asm_exc_page_fault+0x22/0x30 [36808.640623] RIP: 0033:0x7f933846bf30 [36808.655522] Code: Unable to access opcode bytes at 0x7f933846bf06. [36808.660543] RSP: 002b:00007ffeeb469bd8 EFLAGS: 00010202 [36808.665084] RAX: 0000000000000000 RBX: 000055be5722ef80 RCX: 0000000000000053 [36808.679129] RDX: 0000000000000007 RSI: 00007f9338a33ea4 RDI: 00007f9338a33ea4 [36808.684655] RBP: 00007f9338a33ea4 R08: 0000000000000000 R09: 0000000000000000 [36808.702482] R10: 46f9c1b3040ef852 R11: 0000000000000293 R12: 000055be57297ca0 [36808.708889] R13: 0000000000000000 R14: 00007f9338a33e85 R15: 000055be57297ca0 [36808.722977] [36808.725498] Mem-Info: [36808.740051] active_anon:91 inactive_anon:197467 isolated_anon:0 active_file:0 inactive_file:40 isolated_file:73 unevictable:0 dirty:0 writeback:0 slab_reclaimable:23201 slab_unreclaimable:7970 mapped:18 shmem:120 pagetables:949 sec_pagetables:0 bounce:0 kernel_misc_reclaimable:0 free:12650 free_pcp:218 free_cma:0 [36808.784354] Node 0 active_anon:364kB inactive_anon:789868kB active_file:0kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):292kB mappeB dirty:0kB writeback:0kB shmem:480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 96256kB writeback_tmp:0kB kernel_stack:2080kB pagetables:3796kB sec_pagetablB all_unreclaimable? no [36808.811238] Node 0 DMA free:4408kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:4kB inactive_anon:9992kB active_file:0kB ina_file:0kB unevictable:0kB writepending:0kB present:15988kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [36808.842943] lowmem_reserve[]: 0 922 922 922 922 [36808.866316] Node 0 DMA32 free:46192kB boost:0kB min:44332kB low:55412kB high:66492kB reserved_highatomic:2048KB active_anon:360kB inactive_anon:779876kB actile:0kB inactive_file:160kB unevictable:0kB writepending:0kB present:1032192kB managed:973652kB mlocked:0kB bounce:0kB free_pcp:872kB local_pcp:872kB free_cma:0k [36808.891041] lowmem_reserve[]: 0 0 0 0 0 [36808.910507] Node 0 DMA: 38*4kB (UME) 22*8kB (UME) 31*16kB (UME) 12*32kB (UME) 6*64kB (UM) 6*128kB (U) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB 8kB [36808.932214] Node 0 DMA32: 218*4kB (UEH) 261*8kB (UEH) 554*16kB (UMEH) 644*32kB (UMEH) 179*64kB (UME) 18*128kB (UMEH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*409646192kB [36808.949979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [36808.972206] 241 total pagecache pages [36808.975702] 0 pages in swap cache [36808.978496] Free swap = 0kB [36808.989308] Total swap = 0kB [36808.991673] 262045 pages RAM [36808.994009] 0 pages HighMem/MovableOnly [36809.004906] 14792 pages reserved [36809.007004] Tasks state (memory values in pages): [36809.018007] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [36809.032049] [ 203] 0 203 12368 817 102400 0 -250 systemd-journal [36809.045098] [ 226] 0 226 5874 424 61440 0 -1000 systemd-udevd [36809.062067] [ 375] 0 375 1468 209 53248 0 0 dhclient [36809.074731] [ 433] 0 433 1435 205 49152 0 0 dhclient [36809.087235] [ 511] 0 511 1005 65 49152 0 0 cron [36809.099686] [ 512] 100 512 2037 192 57344 0 -900 dbus-daemon [36809.116556] [ 514] 0 514 55440 792 73728 0 0 rsyslogd [36809.133366] [ 516] 0 516 4163 265 69632 0 0 systemd-logind [36809.146044] [ 518] 0 518 1449 121 49152 0 0 login [36809.158764] [ 519] 0 519 1547 124 49152 0 0 login [36809.171417] [ 539] 0 539 3912 348 65536 0 -1000 sshd [36809.183892] [ 596] 0 596 4699 401 69632 0 100 systemd [36809.200574] [ 597] 0 597 25672 720 81920 0 100 (sd-pam) [36809.217547] [ 603] 0 603 1776 393 53248 0 0 zsh [36809.229845] [ 604] 0 604 1742 365 53248 0 0 zsh [36809.242138] [ 672] 0 672 4375 412 65536 0 0 sshd [36809.258753] [ 675] 1000 675 4700 401 73728 0 100 systemd [36809.272045] [ 676] 1000 676 25672 721 81920 0 100 (sd-pam) [36809.278726] [ 687] 1000 687 4605 644 69632 0 0 sshd [36809.295400] [ 688] 1000 688 2687 568 61440 0 0 zsh [36809.307714] [ 43930] 1000 43930 526277 186432 1810432 0 0 nuclei [36809.328526] [ 45041] 0 45041 644 23 45056 0 0 sessionclean [36809.333413] [ 45042] 0 45042 644 30 45056 0 0 sessionclean [36809.351551] [ 45044] 0 45044 2313 27 49152 0 0 sort [36809.363997] [ 45045] 0 45045 2313 27 45056 0 0 sort [36809.376308] [ 45046] 0 45046 644 29 45056 0 0 sessionclean [36809.397179] [ 45054] 0 45054 16920 1031 110592 0 0 php8.2 [36809.409596] [ 45081] 0 45081 3762 197 57344 0 0 sshd [36809.421987] [ 45082] 0 45082 3762 197 65536 0 0 sshd [36809.434225] [ 45083] 0 45083 3762 197 61440 0 0 sshd [36809.450944] [ 45084] 0 45084 3762 196 57344 0 0 sshd [36809.455723] [ 45085] 0 45085 3762 105 65536 0 0 sshd [36809.473964] [ 45086] 0 45086 3762 97 57344 0 0 sshd [36809.490592] [ 45087] 0 45087 3762 97 61440 0 0 sshd [36809.503015] [ 45089] 0 45089 3762 97 69632 0 0 sshd [36809.515576] [ 45090] 0 45090 3762 98 61440 0 0 sshd [36809.528106] [ 45091] 0 45091 3762 96 61440 0 0 sshd [36809.540580] [ 45093] 0 45093 1112 82 49152 0 0 cron [36809.559155] [ 45095] 0 45095 1106 69 49152 0 0 cron [36809.563627] [ 45096] 0 45096 1106 69 49152 0 0 cron [36809.580258] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/user.slice/user-1000.slice/session-4.scope,taslei,pid=43930,uid=1000 [36809.604738] Out of memory: Killed process 43930 (nuclei) total-vm:2105108kB, anon-rss:745728kB, file-rss:0kB, shmem-rss:0kB, UID:1000 pgtables:1768kB oom_scoj:0 [36812.810544] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [36812.975398] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [36812.982160] systemd[1]: systemd-journald.service: Consumed 2min 9.360s CPU time. [36813.094241] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [36815.040708] systemd[1]: Stopped systemd-journald.service - Journal Service. [36815.088245] systemd[1]: systemd-journald.service: Consumed 2min 9.360s CPU time. [36815.299182] systemd[1]: Starting systemd-journald.service - Journal Service... [36819.280686] systemd-journald[45125]: File /var/log/journal/2e650e83f8d5458ca68b2e580a54ce5c/system.journal corrupted or uncleanly shut down, renaming and repg. [36821.008277] systemd[1]: Started systemd-journald.service - Journal Service.
mattstorey001 commented 1 year ago

Was probably 8-9 hours between kicking off scan and returning to review, dmesg output spans x hours in total.

tarunKoyalwar commented 1 year ago

@mattstorey001 , Nuclei was using too much RAM (according to OS) so it was killed . to avoid this you need to properly tweak nuclei scan (concurrency & other parameters) for more details ref: https://nuclei.projectdiscovery.io/nuclei/get-started/#mass-scanning-using-nuclei

mattstorey001 commented 1 year ago

Hi, thanks for responding. Is there a recommended memory resource profile for Nuclei? It seems that parallel scanning isnt scalable from a single asset and this needs to be clustered up.