[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: System hangs using audit-0.9.9 (and few versions before)



Loulwa Salem wrote:     [Tue Jun 21 2005, 07:58:28PM EDT]
> I am on an SMP x86_64 platform (kernel .65)
> I tried the 0.9.11 audit ... and it hung (waited on it for 7.5 minutes 
> but I was able to do ctrl-z to stop the test) ... however I believe the 
> run left the system in an unstable state considering it wouldn't respond 
> to a reboot command, and had to be force rebooted anyway.

I have a little more info on the long pathname hang that Loulwa found.
I was able to reproduce it several times on a 2 CPU x86_64 box this
afternoon.  I'm running with the 0.70 kernel and the 0.9.13 tools.

It doesn't seem to matter whether or not the audit subsystem is
enabled, or whether auditd is running.

I get the same ps output:

root      2536     6  0 17:14 ?        00:00:00 [kauditd]
root      2719  2580  0 17:15 pts/0    00:00:00 /bin/bash /etc/init.d/auditd
+restart
root      2727  2719 99 17:15 pts/0    00:00:43 /sbin/auditctl -D
root      2728     7 22 17:15 ?        00:00:10 [audit_list_rule]

On shutdown, the system gets stuck on 'Stopping pcmcia'.  At one point
it provided a little more info:

Stopping pcmcia:  warning: many lost ticks.
Your time source seems to be instable or some driver is hogging interupts
rip __do_softirq+0x4d/0xd0

I'm attaching sysrq -t output and straces of auditctl and auditd.
There wasn't any info available for sysrq -p.  Note that the sysrq -t
output is actually from the 0.68 kernel.  The output I got using the
0.70 kernel wasn't complete for auditctl.

Hope this helps,
Amy

Jun 24 16:36:29 cert-o2 kernel: SysRq : Show Regs
Jun 24 16:37:44 cert-o2 kernel: SysRq : Show State
Jun 24 16:37:44 cert-o2 kernel: 
Jun 24 16:37:44 cert-o2 kernel:                                                        sibling
Jun 24 16:37:44 cert-o2 kernel:   task                 PC          pid father child younger older
Jun 24 16:37:44 cert-o2 kernel: init          S 000000000000000b     0     1      0     2               (NOTLB)
Jun 24 16:37:44 cert-o2 kernel: 0000010082199d78 0000000000000006 0000010082199da8 ffffffff801c9ed3 
Jun 24 16:37:44 cert-o2 kernel:        ffffffffffffffff ffffffff00000000 000000d000000000 0000000100000246 
Jun 24 16:37:44 cert-o2 kernel:        0000010037ff47f0 0000000000000139 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff801c9ed3>{selinux_inode_permission+0} <ffffffff8013dbbc>{__mod_timer+293} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff802fc4ff>{schedule_timeout+244} <ffffffff8013e5e7>{process_timeout+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80187dd6>{sys_select+820} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:44 cert-o2 kernel:        
Jun 24 16:37:44 cert-o2 kernel: migration/0   R  running task       0     2      1             3       (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: ksoftirqd/0   S 0000000000000000     0     3      1             4     2 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821c9f08 0000000000000046 0000000000000000 0000000000000246 
Jun 24 16:37:44 cert-o2 kernel:        0000000000000246 0000010002c21040 0000000000000000 0000000000000005 
Jun 24 16:37:44 cert-o2 kernel:        00000100fbfec030 0000000000000a8f 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff8013ad58>{ksoftirqd+0} <ffffffff8013ad94>{ksoftirqd+60} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:44 cert-o2 kernel:        
Jun 24 16:37:44 cert-o2 kernel: migration/1   S 0000010002c1db60     0     4      1             5     3 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821cbeb8 0000000000000046 0000010002c1db60 0000000000000069 
Jun 24 16:37:44 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000001 
Jun 24 16:37:44 cert-o2 kernel:        0000010037ff37f0 00000000000001c7 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff801331f9>{migration_thread+485} <ffffffff80133014>{migration_thread+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:44 cert-o2 kernel:        
Jun 24 16:37:44 cert-o2 kernel: ksoftirqd/1   S 0000000000000000     0     5      1             6     4 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821ddf08 0000000000000046 0000000000000000 0000000000000246 
Jun 24 16:37:44 cert-o2 kernel:        0000000000000246 0000010081b55e40 0000000000000000 0000000100000007 
Jun 24 16:37:44 cert-o2 kernel:        0000010037ff3030 000000000000082a 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff8013ad58>{ksoftirqd+0} <ffffffff8013ad94>{ksoftirqd+60} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:44 cert-o2 kernel:        
Jun 24 16:37:44 cert-o2 kernel: events/0      R  running task       0     6      1     8       7     5 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: events/1      R  running task       0     7      1  2561      38     6 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: khelper       S 00000100f88cbb28     0     8      6             9       (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 0000010002cc5e68 0000000000000046 0000010002c1db60 000000000000006a 
Jun 24 16:37:44 cert-o2 kernel:        00000100f76c17f0 000000000000006a 0000010002c1edc0 0000000000000001 
Jun 24 16:37:44 cert-o2 kernel:        00000100fbe367f0 00000000000000b6 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff80144e19>{__call_usermodehelper+0} <ffffffff80145325>{worker_thread+226} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013217b>{__wake_up_common+67} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80145243>{worker_thread+0} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80148f97>{kthread+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:44 cert-o2 kernel: kacpid        S 00000100fbe80f98     0     9      6            36     8 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100fbc91e68 0000000000000046 0000000000000000 000000000000006a 
Jun 24 16:37:44 cert-o2 kernel:        0000000000000000 0000000000000009 ffffffff804499c0 0000000000000000 
Jun 24 16:37:44 cert-o2 kernel:        00000100fbe36030 000000000000055e 
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:44 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kblockd/0     S ffffffff802415a5     0    36      6            37     9 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e19e68 0000000000000046 0000000000000000 0000000000000097 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000001 0000000000000097 0000000000000700 000000008011ca13 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc677f0 00000000000070cd 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802415a5>{blk_unplug_work+0} <ffffffff80145325>{worker_thread+226} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013217b>{__wake_up_common+67} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80145243>{worker_thread+0} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80148f97>{kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: kblockd/1     S 00000100fbd1c5d0     0    37      6            50    36 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcb9e68 0000000000000046 0000000000000001 0000000000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 000000018011ca13 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc67030 00000000000064c9 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802415a5>{blk_unplug_work+0} <ffffffff80145325>{worker_thread+226} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: khubd         S 0000000000000000     0    38      1            52     7 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e1de78 0000000000000046 0000010037e1ddc8 000000000000007d 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000000 0000000000000000 ffffffff804499c0 0000000000000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc7b7f0 0000000000000733 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8027a0ea>{hub_thread+2767} <ffffffff8015d7e4>{poison_obj+54} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff801ee39a>{vgacon_cursor+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801ee39a>{vgacon_cursor+0} <ffffffff8027961b>{hub_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: pdflush       S ffffffff80149088     0    50      6            51    37 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e35ec8 0000000000000046 0000000000000000 000000000000006a 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc7b030 0000000080130f01 ffffffff804499c0 0000000047b0b98d 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc7b030 000000000000038a 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130435>{task_rq_lock+59} <ffffffff8013239f>{set_user_nice+168} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8015c130>{pdflush+191} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8015c071>{pdflush+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: pdflush       R  running task       0    51      6            54    50 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: aio/0         S 00000100fbcd44f8     0    54      6            55    51 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e3be68 0000000000000046 0000000000000000 000000000000006b 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000000 0000000000000008 ffffffff804499c0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007feea030 00000000000003e4 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kswapd1       S 00000100fbcd1f08     0    52      1            53    38 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd1eb8 0000000000000046 ffffffff8013212a 0000000000100100 
Jun 24 16:37:45 cert-o2 kernel:        0000000000200200 00000100fbcd1e48 00000100fbc7e030 0000000102c1db60 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbc7e030 0000000000000e3b 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013212a>{default_wake_function+0} <ffffffff8016308c>{kswapd+231} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f50>{schedule_tail+11} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80162fa5>{kswapd+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: kswapd0       S 00000100fbcd3f08     0    53      1           128    52 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd3eb8 0000000000000046 ffffffff804f7680 ffffffff0000007d 
Jun 24 16:37:45 cert-o2 kernel:        000001007feea7f0 0000000000000000 ffffffff804499c0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007feea7f0 00000000000009fe 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8016308c>{kswapd+231} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80130f01>{finish_task_switch+55} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80130f50>{schedule_tail+11} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80162fa5>{kswapd+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: aio/1         S 00000100fbcd4578     0    55      6          2741    54 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd7e68 0000000000000046 0000000000000000 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000000 0000000000000008 000000000000231e 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007fee07f0 0000000000000be9 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kseriod       S 0000000000000000     0   128      1           212    53 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e69ec8 0000000000000046 0000010037e69e18 000001000000007c 
Jun 24 16:37:45 cert-o2 kernel:        ffffffff80130749 0000000000000000 ffffffff804499c0 00000000fbccb788 
Jun 24 16:37:45 cert-o2 kernel:        000001007fee0030 000000000000151b 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130749>{deactivate_task+37} <ffffffff80234370>{serio_thread+469} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80130f50>{schedule_tail+11} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801ee39a>{vgacon_cursor+0} <ffffffff801ee39a>{vgacon_cursor+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8023419b>{serio_thread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 0000000000000000     0   212      1           886   128 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fb599e78 0000000000000046 000001007e9c5f58 0000010000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001fbdd2000 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbfb07f0 0000000000000180 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: udevd         S 0000000000000006     0   886      1          1239   212 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fabebd78 0000000000000006 00000000fffffff4 ffffffff00000076 
Jun 24 16:37:45 cert-o2 kernel:        000000d0fb7db030 0000000000000246 0000000000000256 000000000000d780 
Jun 24 16:37:45 cert-o2 kernel:        0000010002e837f0 000000000000752b 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff8029fbaa>{datagram_poll+39} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187dd6>{sys_select+820} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 000001007ffcadb4     0  1239      1          1240   886 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa315e78 0000000000000046 00000100fa315dc8 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100faf9a030 0000000000000076 0000010081b53bc0 00000001000003e8 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c147f0 00000000000032e9 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffffa0005798>{:jbd:commit_timeout+0} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffffa000579e>{:jbd:kjournald+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 000001007ffcab9c     0  1240      1          1241  1239 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c8fe78 0000000000000046 00000100f9c8fdc8 0000010000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001000003e8 
Jun 24 16:37:45 cert-o2 kernel:        000001007f9307f0 0000000000000b4b 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 000001007ffca984     0  1241      1          1242  1240 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa94fe78 0000000000000046 00000100fa94fdc8 0000010000000077 
Jun 24 16:37:45 cert-o2 kernel:        00000100faf9a030 0000000000000077 0000010081b53bc0 00000001000003e8 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c467f0 00000000000013d0 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffffa0005798>{:jbd:commit_timeout+0} <ffffffff80110c8f>{child_rip+8} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffffa000579e>{:jbd:kjournald+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 0000000000000000     0  1242      1          1243  1241 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa8b3e78 0000000000000046 00000100fa8b3dc8 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f7f0 0000000000000076 0000010002c1edc0 00000001000003e8 
Jun 24 16:37:45 cert-o2 kernel:        00000100faf9a7f0 0000000000001af0 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 0000000000000000     0  1243      1          1244  1242 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa94be78 0000000000000046 00000100f913e4d8 0000010000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001f913e4d8 
Jun 24 16:37:45 cert-o2 kernel:        0000010037d3b7f0 0000000000000b88 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: kjournald     S 000001007ffca33c     0  1244      1          1545  1243 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c8be78 0000000000000046 00000100f94ff4b0 0000010000000074 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c8d7f0 0000000000000074 0000010081b53bc0 0000000100000003 
Jun 24 16:37:45 cert-o2 kernel:        0000010037d3b030 00000000000002bc 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel: syslogd       R  running task       0  1545      1          1549  1244 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: klogd         R  running task       0  1549      1          1559  1545 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: irqbalance    R  running task       0  1559      1          1569  1549 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: portmap       S 000001007fc1a280     0  1569      1          1588  1559 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c25e88 0000000000000002 00000100f9c25e48 0000001c00000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb12f7f0 0000000000000076 0000010081b53bc0 0000000100000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa858030 000000000000470f 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801337f2>{add_wait_queue+18} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff802c1eab>{tcp_poll+44} <ffffffff80188191>{sys_poll+610} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801875f1>{__pollwait+0} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: rpc.statd     S 0000000000000007     0  1588      1          1618  1569 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa6ebd78 0000000000000002 00000100fa1bcac0 ffffffff80299ac8 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000001 0000000000000246 000000d000000040 0000000100000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb12f7f0 0000000000005083 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80299ac8>{sock_recvmsg+284} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff802c1eab>{tcp_poll+44} <ffffffff80187a57>{do_select+939} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8018b225>{dput+56} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: rpc.idmapd    R  running task       0  1618      1          1672  1588 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: smartd        S 0000000100178147     0  1672      1          1681  1618 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f98a3ee8 0000000000000002 0000010002feb690 0000010000000075 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f030 0000000000000075 0000010081b53bc0 000000018015d7e4 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbfac030 00000000000036e0 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013dbbc>{__mod_timer+293} <ffffffff802fc4ff>{schedule_timeout+244} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013e5e7>{process_timeout+0} <ffffffff8013e71a>{sys_nanosleep+192} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: acpid         S 0000000000000005     0  1681      1          1690  1672 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f98b3d78 0000000000000002 00000100f98b3d98 0000000000000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa8fa398 00000001fa8fa408 0000000042bc6db4 0000000130b1ea40 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c030 00000000000255d6 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80187a57>{do_select+939} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8018f2c8>{dnotify_parent+34} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: cupsd         R  running task       0  1690      1          1740  1681 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: sshd          S 0000010037d85d70     0  1740      1  2594    1781  1690 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f94e7d78 0000000000000002 0000010002f0a3c8 ffffffff00000074 
Jun 24 16:37:45 cert-o2 kernel:        000001007d6af7f0 0000000000000074 0000010081b53bc0 0000000180130f01 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb7db7f0 00000000000001b3 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80187a57>{do_select+939} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: xinetd        S 0000010037d85e88     0  1781      1          1800  1740 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f96dfd78 0000000000000006 0000000000000047 ffffffff00000076 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c787f0 0000000000000076 0000010081b53bc0 0000000100000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f030 0000000000012f31 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801810aa>{pipe_poll+47} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187dd6>{sys_select+820} <ffffffff80141e8e>{do_sigaction+490} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: sendmail      R  running task       0  1800      1          1808  1781 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: sendmail      S 0000007fbfffd5f0     0  1808      1          1822  1800 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f93c3f68 0000000000000006 0000000000000000 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f7f0 0000000000000076 0000010081b53bc0 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c8d030 000000000004a871 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80175cb9>{vfs_write+248} <ffffffff801422f8>{sys_pause+22} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: gpm           S 0000000000000006     0  1822      1          1887  1808 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8c2bd78 0000000000000002 0000000137e460e8 0000000000000246 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000012 0000000000000001 ffffffff803e59e8 0000000100000001 
Jun 24 16:37:45 cert-o2 kernel:        00000100faa27030 00000000000090bc 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013dbbc>{__mod_timer+293} <ffffffff802fc4ff>{schedule_timeout+244} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013e5e7>{process_timeout+0} <ffffffff80187a57>{do_select+939} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8018f2c8>{dnotify_parent+34} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: crond         R  running task       0  1887      1          1904  1822 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: atd           R  running task       0  1904      1          1913  1887 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: dbus-daemon-1 S 7fffffffffffffff     0  1913      1          1914  1904 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8eabe88 0000000000000006 00000100f8eabe18 0000000000000246 
Jun 24 16:37:45 cert-o2 kernel:        0000010037e46f58 0000000000000000 00000100f8eabf50 00000000f8eabf50 
Jun 24 16:37:45 cert-o2 kernel:        000001007f96e030 00000000000185ff 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801337f2>{add_wait_queue+18} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80188191>{sys_poll+610} <ffffffff801875f1>{__pollwait+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d25>{sys_read+96} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: dbus-daemon-1 S 0000000000000000     0  1914      1          1925  1913 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8eedb28 0000000000000006 0000000000000000 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000000 0000000000000000 0000000000000000 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007f539030 00000000000026df 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80133912>{prepare_to_wait_exclusive+21} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8029f485>{skb_recv_datagram+373} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff802b6017>{netlink_recvmsg+100} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80299ac8>{sock_recvmsg+284} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff802996cb>{sockfd_lookup+16} <ffffffff8029aefc>{sys_recvfrom+182} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801e0c50>{__up_read+15} <ffffffff80122659>{do_page_fault+509} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: hald          R  running task       0  1925      1          1932  1914 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: login         S 0000000000000000     0  1932      1  2562    1933  1925 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbd47eb8 0000000000000002 0000011300000001 00000000ffffffff 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c8d7f0 0000000000000002 0000000000000001 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100fbfb0030 0000000000001f7e 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff801421e8>{sys_rt_sigaction+97} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 000001007f8bd398     0  1933      1          1934  1932 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8d25d88 0000000000000006 0000000ff8987c58 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100f8c257f0 000000000002ec0e 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802285a5>{complement_pos+12} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 000001007f6b9280     0  1934      1          1935  1933 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8c8bd88 0000000000000002 0000000ff89874b0 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f7f0 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007f5397f0 000000000000dd86 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 000001007fc1a050     0  1935      1          1936  1934 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8dafd88 0000000000000002 0000000ffafcc050 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        000001007f96e7f0 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100f91577f0 0000000000023096 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 0000010037c49a28     0  1936      1          1937  1935 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8e25d88 0000000000000002 0000000f7f168b40 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb77f7f0 000000000000fca7 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 000001007dc15398     0  1937      1          1938  1936 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f88cbd88 0000000000000002 0000000ff76e8c58 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007f4eb7f0 000000000001eb30 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: mingetty      S 000001007fc1ae88     0  1938      1                1937 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f88ddd88 0000000000000002 0000000ff84d47f8 0000010000000076 
Jun 24 16:37:45 cert-o2 kernel:        000001007f4eb7f0 0000000000000076 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        000001007f96e7f0 000000000001e690 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: kauditd       S 000001007da03ee8     0  2561      7                     (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007da03ea8 0000000000000046 000001007da03df8 0000000000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100f76a3030 00000000048cce03 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80151b7c>{kauditd_thread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80151cf6>{kauditd_thread+378} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0} 
Jun 24 16:37:45 cert-o2 kernel:        
Jun 24 16:37:45 cert-o2 kernel: bash          S 0000000000000001     0  2562   1932                     (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f896bd88 0000000000000006 0000000000000000 0000000000000001 
Jun 24 16:37:45 cert-o2 kernel:        0000000000000246 0000000000000246 00000100f896bd38 0000000100000206 
Jun 24 16:37:45 cert-o2 kernel:        000001007f6287f0 000000000001478d 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80235879>{uart_start+38} <ffffffff802fc470>{schedule_timeout+101} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801c76ec>{avc_has_perm+70} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8021c209>{tty_read+230} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175ab3>{vfs_read+207} <ffffffff80175d0a>{sys_read+69} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: sshd          S 00000100f8987a28     0  2594   1740  2596    2742       (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007f7f9d78 0000000000000002 000001007fb099d0 0000000000000075 
Jun 24 16:37:45 cert-o2 kernel:        0000010037cfd7f0 0000000000000075 0000010002c1edc0 0000000000000246 
Jun 24 16:37:45 cert-o2 kernel:        00000100f76a37f0 00000000000013ad 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff8021be10>{tty_ldisc_deref+103} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80187dd6>{sys_select+820} <ffffffff8018f2c8>{dnotify_parent+34} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: bash          S 0000007fbffff7a4     0  2596   2594  2732               (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007de17eb8 0000000000000002 0000011300000113 0000000000000074 
Jun 24 16:37:45 cert-o2 kernel:        0000010037cfd7f0 0000000000000074 0000010002c1edc0 0000000000000000 
Jun 24 16:37:45 cert-o2 kernel:        0000010002e83030 0000000000002e74 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8011003e>{system_call+126} 
Jun 24 16:37:45 cert-o2 kernel: auditd        S 0000007fbfffe6d4     0  2732   2596  2740               (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007e817eb8 0000000000000006 0000011300000113 00000100f8a516d8 
Jun 24 16:37:45 cert-o2 kernel:        000001007f90c120 0000000000000002 0000000000000113 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        0000010037cfd7f0 0000000000013304 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801101a2>{tracesys+209} 
Jun 24 16:37:45 cert-o2 kernel: auditctl      R  running task       0  2740   2732                     (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: audit_list_ru R  running task       0  2741      6                  55 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: sshd          S 0000010002feb654     0  2742   1740  2744          2594 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f6897bd8 0000000000000002 0000010037df69d8 0000010000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001802a05fb 
Jun 24 16:37:45 cert-o2 kernel:        000001007d6af7f0 0000000000000aba 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8029cba6>{sock_def_readable+16} <ffffffff802f7553>{unix_stream_sendmsg+656} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff802fc470>{schedule_timeout+101} <ffffffff801338b6>{prepare_to_wait+21} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff802f7b05>{unix_stream_recvmsg+592} <ffffffff801339ba>{autoremove_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80299c6e>{sock_aio_read+297} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801759b8>{do_sync_read+173} <ffffffff801df486>{kobject_get+18} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80154137>{audit_syscall_entry+306} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff80175ac6>{vfs_read+226} <ffffffff80175d0a>{sys_read+69} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801101a2>{tracesys+209} 
Jun 24 16:37:45 cert-o2 kernel: sshd          R  running task       0  2744   2742  2745               (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: bash          S 00000000fffffe00     0  2745   2744  2786               (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f6a7feb8 0000000000000006 0000000100000001 0000000000000069 
Jun 24 16:37:45 cert-o2 kernel:        00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        0000010037c14030 0000000000001d99 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130f01>{finish_task_switch+55} <ffffffff801399f3>{do_wait+3298} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801101a2>{tracesys+209} 
Jun 24 16:37:45 cert-o2 kernel: su            S 0000007fbffff32c     0  2786   2745  2787               (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f89cfeb8 0000000000000006 0000011300000001 0000010037c4e4b8 
Jun 24 16:37:45 cert-o2 kernel:        000001007f652058 0000000000000002 0000000000000001 0000000100000000 
Jun 24 16:37:45 cert-o2 kernel:        00000100f83657f0 000000000000a236 
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0} 
Jun 24 16:37:45 cert-o2 kernel:        <ffffffff801101a2>{tracesys+209} 
Jun 24 16:37:45 cert-o2 kernel: bash          R  running task       0  2787   2786                     (NOTLB)
execve("/sbin/auditctl", ["/sbin/auditctl", "-w", "/tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "-k", "good-key"], [/* 20 vars */]) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
brk(0)                                  = 0x510000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a95556000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=24476, ...}) = 0
mmap(NULL, 24476, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a95557000
close(3)                                = 0
open("/lib64/tls/libpthread.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 V\36033"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=106730, ...}) = 0
mmap(0x3333f00000, 1131384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333f00000
mprotect(0x3333f10000, 1065848, PROT_NONE) = 0
mmap(0x333400f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x333400f000
mmap(0x3334011000, 13176, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3334011000
close(3)                                = 0
open("/lib64/tls/libc.so.6", O_RDONLY)  = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\305A33"..., 640) = 640
lseek(3, 624, SEEK_SET)                 = 624
read(3, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\4\0\0\0"..., 32) = 32
fstat(3, {st_mode=S_IFREG|0755, st_size=1489988, ...}) = 0
mmap(0x3333400000, 2301864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333400000
mprotect(0x3333529000, 1085352, PROT_NONE) = 0
mmap(0x3333628000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x128000) = 0x3333628000
mmap(0x333362e000, 16296, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x333362e000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555d000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555e000
mprotect(0x3333628000, 12288, PROT_READ) = 0
arch_prctl(0x1002, 0x2a9555dec0)        = 0
munmap(0x2a95557000, 24476)             = 0
set_tid_address(0x2a9555df50)           = 2677
rt_sigaction(SIGRTMIN, {0x3333f051e0, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x3333f05260, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(0x3, 0x7fbffff7d0)            = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0x7fbffff5d0, 35, (nil), 0}) = 0
getuid()                                = 0
socket(PF_NETLINK, SOCK_RAW, 9)         = 3
fcntl(3, F_SETFD, FD_CLOEXEC)           = 0
brk(0)                                  = 0x510000
brk(0x531000)                           = 0x531000
write(2, "The base name of the path is too"..., 37) = 37
close(3)                                = 0
exit_group(0xffffffffffffffff, 0xffffffffffffffff, 0x7fbffff7c0, 0x1, 0x3c <unfinished ... exit status 255>
execve("/etc/init.d/auditd", ["/etc/init.d/auditd", "restart"], [/* 17 vars */]) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
brk(0)                                  = 0x6bc000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a95556000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=24476, ...}) = 0
mmap(NULL, 24476, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a95557000
close(3)                                = 0
open("/lib64/libtermcap.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\20\360"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=15744, ...}) = 0
mmap(0x3333f00000, 1060400, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333f00000
mprotect(0x3333f03000, 1048112, PROT_NONE) = 0
mmap(0x3334002000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x3334002000
close(3)                                = 0
open("/lib64/libdl.so.2", O_RDONLY)     = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\17\220"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=18007, ...}) = 0
mmap(0x3333900000, 1056968, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333900000
mprotect(0x3333902000, 1048776, PROT_NONE) = 0
mmap(0x3333a01000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x3333a01000
close(3)                                = 0
open("/lib64/tls/libc.so.6", O_RDONLY)  = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\305A33"..., 640) = 640
lseek(3, 624, SEEK_SET)                 = 624
read(3, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\4\0\0\0"..., 32) = 32
fstat(3, {st_mode=S_IFREG|0755, st_size=1489988, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555d000
mmap(0x3333400000, 2301864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333400000
mprotect(0x3333529000, 1085352, PROT_NONE) = 0
mmap(0x3333628000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x128000) = 0x3333628000
mmap(0x333362e000, 16296, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x333362e000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555e000
mprotect(0x3333628000, 12288, PROT_READ) = 0
arch_prctl(0x1002, 0x2a9555e3e0)        = 0
munmap(0x2a95557000, 24476)             = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
open("/dev/tty", O_RDWR|O_NONBLOCK)     = 3
close(3)                                = 0
brk(0)                                  = 0x6bc000
brk(0x6dd000)                           = 0x6dd000
open("/usr/lib/locale/locale-archive", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=39538224, ...}) = 0
mmap(NULL, 39538224, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a9555f000
close(3)                                = 0
getuid()                                = 0
getgid()                                = 0
geteuid()                               = 0
getegid()                               = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
open("/etc/mtab", O_RDONLY)             = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=443, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b14000
read(3, "/dev/hda5 / ext3 rw 0 0\nnone /pr"..., 4096) = 443
close(3)                                = 0
munmap(0x2a97b14000, 4096)              = 0
open("/proc/meminfo", O_RDONLY)         = 3
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b14000
read(3, "MemTotal:      4060324 kB\nMemFre"..., 1024) = 646
close(3)                                = 0
munmap(0x2a97b14000, 4096)              = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigaction(SIGQUIT, {SIG_IGN}, {SIG_DFL}, 8) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
stat("/root", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
getpid()                                = 2751
open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=21546, ...}) = 0
mmap(NULL, 21546, PROT_READ, MAP_SHARED, 3, 0) = 0x2a97b14000
close(3)                                = 0
getppid()                               = 2750
getpgrp()                               = 2750
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
open("/etc/init.d/auditd", O_RDONLY)    = 3
ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fbffff710) = -1 ENOTTY (Inappropriate ioctl for device)
lseek(3, 0, SEEK_CUR)                   = 0
read(3, "#!/bin/bash\n#\n# auditd        Th"..., 80) = 80
lseek(3, 0, SEEK_SET)                   = 0
getrlimit(0x7, 0x7fbffff750)            = 0
dup2(3, 255)                            = 255
close(3)                                = 0
fcntl(255, F_SETFD, FD_CLOEXEC)         = 0
fcntl(255, F_GETFL)                     = 0x8000 (flags O_RDONLY|O_LARGEFILE|0x8000)
fstat(255, {st_mode=S_IFREG|0755, st_size=2619, ...}) = 0
lseek(255, 0, SEEK_CUR)                 = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
read(255, "#!/bin/bash\n#\n# auditd        Th"..., 2619) = 2619
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/etc/init.d/functions", {st_mode=S_IFREG|0755, st_size=10721, ...}) = 0
access("/etc/init.d/functions", X_OK)   = 0
open("/etc/init.d/functions", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0755, st_size=10721, ...}) = 0
read(3, "# -*-Shell-script-*-\n#\n# functio"..., 10721) = 10721
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
umask(022)                              = 022
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
pipe([3, 4])                            = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2752
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {0x433e50, [], 0x4000000}, 8) = 0
close(4)                                = 0
read(3, "pty\n", 128)                   = 4
read(3, "", 128)                        = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 2}], WNOHANG, NULL) = 2752
wait4(-1, 0x7fbfffe914, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/etc/sysconfig/i18n", {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/i18n", {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
access("/etc/sysconfig/i18n", X_OK)     = -1 EACCES (Permission denied)
open("/etc/sysconfig/i18n", O_RDONLY)   = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
read(3, "LANG=\"en_US.UTF-8\"\nSUPPORTED=\"en"..., 80) = 80
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/etc/sysconfig/init", {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/init", {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
access("/etc/sysconfig/init", X_OK)     = -1 EACCES (Permission denied)
open("/etc/sysconfig/init", O_RDONLY)   = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
read(3, "# color => new RH6.0 bootup\n# ve"..., 991) = 991
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
open("/usr/share/locale/locale.alias", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=2528, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b1a000
read(3, "# Locale name alias data base.\n#"..., 4096) = 2528
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x2a97b1a000, 4096)              = 0
open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en_US.utf8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en_US/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en.UTF-8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en.utf8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
brk(0x6fe000)                           = 0x6fe000
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
pipe([3, 4])                            = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
lseek(255, -1866, SEEK_CUR)             = 753
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2754
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {0x433e50, [], 0x4000000}, 8) = 0
close(4)                                = 0
read(3, "0\n", 128)                     = 2
read(3, "", 128)                        = 0
close(3)                                = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG, NULL) = 2754
wait4(-1, 0x7fbfffef34, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
read(255, "\n# Check config\ntest -f /etc/sys"..., 2619) = 1866
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/etc/sysconfig/auditd", {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/auditd", {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
access("/etc/sysconfig/auditd", X_OK)   = -1 EACCES (Permission denied)
open("/etc/sysconfig/auditd", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
read(3, "# Add extra options here\nEXTRAOP"..., 514) = 514
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
access("/sbin/auditd", X_OK)            = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/etc/auditd.conf", {st_mode=S_IFREG|0640, st_size=372, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b1a000
write(1, "Stopping auditd: ", 17)       = 17
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/var/run/auditd.pid", {st_mode=S_IFREG|0644, st_size=5, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/run/auditd.pid", O_RDONLY)   = 3
fcntl(0, F_GETFD)                       = 0
fcntl(0, F_DUPFD, 10)                   = 10
fcntl(0, F_GETFD)                       = 0
fcntl(10, F_SETFD, FD_CLOEXEC)          = 0
dup2(3, 0)                              = 0
close(3)                                = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fbfffcb50) = -1 ENOTTY (Inappropriate ioctl for device)
lseek(0, 0, SEEK_CUR)                   = 0
read(0, "2738\n", 128)                  = 5
dup2(10, 0)                             = 0
fcntl(10, F_GETFD)                      = 0x1 (flags FD_CLOEXEC)
close(10)                               = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/proc/2738", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
fcntl(2, F_GETFD)                       = 0
fcntl(2, F_DUPFD, 10)                   = 10
fcntl(2, F_GETFD)                       = 0
fcntl(10, F_SETFD, FD_CLOEXEC)          = 0
dup2(1, 2)                              = 2
fcntl(1, F_GETFD)                       = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/proc/2738", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
dup2(10, 2)                             = 2
fcntl(10, F_GETFD)                      = 0x1 (flags FD_CLOEXEC)
close(10)                               = 0
open("/dev/null", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 3
fcntl(1, F_GETFD)                       = 0
fcntl(1, F_DUPFD, 10)                   = 10
fcntl(1, F_GETFD)                       = 0
fcntl(10, F_SETFD, FD_CLOEXEC)          = 0
dup2(3, 1)                              = 1
close(3)                                = 0
fcntl(2, F_GETFD)                       = 0
fcntl(2, F_DUPFD, 10)                   = 11
fcntl(2, F_GETFD)                       = 0
fcntl(11, F_SETFD, FD_CLOEXEC)          = 0
dup2(1, 2)                              = 2
fcntl(1, F_GETFD)                       = 0
kill(2738, SIGTERM)                     = 0
dup2(11, 2)                             = 2
fcntl(11, F_GETFD)                      = 0x1 (flags FD_CLOEXEC)
close(11)                               = 0
dup2(10, 1)                             = 1
fcntl(10, F_GETFD)                      = 0x1 (flags FD_CLOEXEC)
close(10)                               = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/usleep", 0x7fbfffc2a0)      = -1 ENOENT (No such file or directory)
stat("/usr/sbin/usleep", 0x7fbfffc2a0)  = -1 ENOENT (No such file or directory)
stat("/bin/usleep", {st_mode=S_IFREG|0755, st_size=31296, ...}) = 0
access("/bin/usleep", X_OK)             = 0
stat("/bin/usleep", {st_mode=S_IFREG|0755, st_size=31296, ...}) = 0
access("/bin/usleep", X_OK)             = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
lseek(255, -14, SEEK_CUR)               = 2605
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2755
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2755
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffc0c4, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/proc/2738", 0x7fbfffb0f0)        = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("/proc/2738", 0x7fbfffbea0)        = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/initlog", {st_mode=S_IFREG|0755, st_size=43488, ...}) = 0
access("/sbin/initlog", X_OK)           = 0
stat("/sbin/initlog", {st_mode=S_IFREG|0755, st_size=43488, ...}) = 0
access("/sbin/initlog", X_OK)           = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2756
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2756
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffc0d4, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[60G", 5)                  = 5
write(1, "[  ", 3)                      = 3
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[0;32m", 7)                = 7
write(1, "OK", 2)                       = 2
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[0;39m", 7)                = 7
write(1, "  ]", 3)                      = 3
write(1, "\r", 1)                       = 1
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/rm", 0x7fbfffd6e0)          = -1 ENOENT (No such file or directory)
stat("/usr/sbin/rm", 0x7fbfffd6e0)      = -1 ENOENT (No such file or directory)
stat("/bin/rm", {st_mode=S_IFREG|0755, st_size=41136, ...}) = 0
access("/bin/rm", X_OK)                 = 0
stat("/bin/rm", {st_mode=S_IFREG|0755, st_size=41136, ...}) = 0
access("/bin/rm", X_OK)                 = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2757
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2757
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffd504, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\n", 1)                       = 1
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2758
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2758
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffe3b4, WNOHANG, NULL)  = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff)        = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2759
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, 

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]