System hangs using audit-0.9.9 (and few versions before)
Amy Griffis
amy.griffis at hp.com
Fri Jun 24 21:58:06 UTC 2005
Loulwa Salem wrote: [Tue Jun 21 2005, 07:58:28PM EDT]
> I am on an SMP x86_64 platform (kernel .65)
> I tried the 0.9.11 audit ... and it hung (waited on it for 7.5 minutes
> but I was able to do ctrl-z to stop the test) ... however I believe the
> run left the system in an unstable state considering it wouldn't respond
> to a reboot command, and had to be force rebooted anyway.
I have a little more info on the long pathname hang that Loulwa found.
I was able to reproduce it several times on a 2 CPU x86_64 box this
afternoon. I'm running with the 0.70 kernel and the 0.9.13 tools.
It doesn't seem to matter whether or not the audit subsystem is
enabled, or whether auditd is running.
I get the same ps output:
root 2536 6 0 17:14 ? 00:00:00 [kauditd]
root 2719 2580 0 17:15 pts/0 00:00:00 /bin/bash /etc/init.d/auditd
+restart
root 2727 2719 99 17:15 pts/0 00:00:43 /sbin/auditctl -D
root 2728 7 22 17:15 ? 00:00:10 [audit_list_rule]
On shutdown, the system gets stuck on 'Stopping pcmcia'. At one point
it provided a little more info:
Stopping pcmcia: warning: many lost ticks.
Your time source seems to be instable or some driver is hogging interupts
rip __do_softirq+0x4d/0xd0
I'm attaching sysrq -t output and straces of auditctl and auditd.
There wasn't any info available for sysrq -p. Note that the sysrq -t
output is actually from the 0.68 kernel. The output I got using the
0.70 kernel wasn't complete for auditctl.
Hope this helps,
Amy
-------------- next part --------------
Jun 24 16:36:29 cert-o2 kernel: SysRq : Show Regs
Jun 24 16:37:44 cert-o2 kernel: SysRq : Show State
Jun 24 16:37:44 cert-o2 kernel:
Jun 24 16:37:44 cert-o2 kernel: sibling
Jun 24 16:37:44 cert-o2 kernel: task PC pid father child younger older
Jun 24 16:37:44 cert-o2 kernel: init S 000000000000000b 0 1 0 2 (NOTLB)
Jun 24 16:37:44 cert-o2 kernel: 0000010082199d78 0000000000000006 0000010082199da8 ffffffff801c9ed3
Jun 24 16:37:44 cert-o2 kernel: ffffffffffffffff ffffffff00000000 000000d000000000 0000000100000246
Jun 24 16:37:44 cert-o2 kernel: 0000010037ff47f0 0000000000000139
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff801c9ed3>{selinux_inode_permission+0} <ffffffff8013dbbc>{__mod_timer+293}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff802fc4ff>{schedule_timeout+244} <ffffffff8013e5e7>{process_timeout+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80187dd6>{sys_select+820} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:44 cert-o2 kernel:
Jun 24 16:37:44 cert-o2 kernel: migration/0 R running task 0 2 1 3 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: ksoftirqd/0 S 0000000000000000 0 3 1 4 2 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821c9f08 0000000000000046 0000000000000000 0000000000000246
Jun 24 16:37:44 cert-o2 kernel: 0000000000000246 0000010002c21040 0000000000000000 0000000000000005
Jun 24 16:37:44 cert-o2 kernel: 00000100fbfec030 0000000000000a8f
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff8013ad58>{ksoftirqd+0} <ffffffff8013ad94>{ksoftirqd+60}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:44 cert-o2 kernel:
Jun 24 16:37:44 cert-o2 kernel: migration/1 S 0000010002c1db60 0 4 1 5 3 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821cbeb8 0000000000000046 0000010002c1db60 0000000000000069
Jun 24 16:37:44 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000001
Jun 24 16:37:44 cert-o2 kernel: 0000010037ff37f0 00000000000001c7
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff801331f9>{migration_thread+485} <ffffffff80133014>{migration_thread+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:44 cert-o2 kernel:
Jun 24 16:37:44 cert-o2 kernel: ksoftirqd/1 S 0000000000000000 0 5 1 6 4 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100821ddf08 0000000000000046 0000000000000000 0000000000000246
Jun 24 16:37:44 cert-o2 kernel: 0000000000000246 0000010081b55e40 0000000000000000 0000000100000007
Jun 24 16:37:44 cert-o2 kernel: 0000010037ff3030 000000000000082a
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff8013ad58>{ksoftirqd+0} <ffffffff8013ad94>{ksoftirqd+60}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:44 cert-o2 kernel:
Jun 24 16:37:44 cert-o2 kernel: events/0 R running task 0 6 1 8 7 5 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: events/1 R running task 0 7 1 2561 38 6 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: khelper S 00000100f88cbb28 0 8 6 9 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 0000010002cc5e68 0000000000000046 0000010002c1db60 000000000000006a
Jun 24 16:37:44 cert-o2 kernel: 00000100f76c17f0 000000000000006a 0000010002c1edc0 0000000000000001
Jun 24 16:37:44 cert-o2 kernel: 00000100fbe367f0 00000000000000b6
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff80144e19>{__call_usermodehelper+0} <ffffffff80145325>{worker_thread+226}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013217b>{__wake_up_common+67}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80145243>{worker_thread+0} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80148f97>{kthread+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:44 cert-o2 kernel: kacpid S 00000100fbe80f98 0 9 6 36 8 (L-TLB)
Jun 24 16:37:44 cert-o2 kernel: 00000100fbc91e68 0000000000000046 0000000000000000 000000000000006a
Jun 24 16:37:44 cert-o2 kernel: 0000000000000000 0000000000000009 ffffffff804499c0 0000000000000000
Jun 24 16:37:44 cert-o2 kernel: 00000100fbe36030 000000000000055e
Jun 24 16:37:44 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:44 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kblockd/0 S ffffffff802415a5 0 36 6 37 9 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e19e68 0000000000000046 0000000000000000 0000000000000097
Jun 24 16:37:45 cert-o2 kernel: 0000000000000001 0000000000000097 0000000000000700 000000008011ca13
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc677f0 00000000000070cd
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802415a5>{blk_unplug_work+0} <ffffffff80145325>{worker_thread+226}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013217b>{__wake_up_common+67}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80145243>{worker_thread+0} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8014905f>{kthread+200} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80148f97>{kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: kblockd/1 S 00000100fbd1c5d0 0 37 6 50 36 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcb9e68 0000000000000046 0000000000000001 0000000000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 000000018011ca13
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc67030 00000000000064c9
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802415a5>{blk_unplug_work+0} <ffffffff80145325>{worker_thread+226}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: khubd S 0000000000000000 0 38 1 52 7 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e1de78 0000000000000046 0000010037e1ddc8 000000000000007d
Jun 24 16:37:45 cert-o2 kernel: 0000000000000000 0000000000000000 ffffffff804499c0 0000000000000246
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc7b7f0 0000000000000733
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8027a0ea>{hub_thread+2767} <ffffffff8015d7e4>{poison_obj+54}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff801ee39a>{vgacon_cursor+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801ee39a>{vgacon_cursor+0} <ffffffff8027961b>{hub_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: pdflush S ffffffff80149088 0 50 6 51 37 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e35ec8 0000000000000046 0000000000000000 000000000000006a
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc7b030 0000000080130f01 ffffffff804499c0 0000000047b0b98d
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc7b030 000000000000038a
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130435>{task_rq_lock+59} <ffffffff8013239f>{set_user_nice+168}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8015c130>{pdflush+191}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8015c071>{pdflush+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: pdflush R running task 0 51 6 54 50 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: aio/0 S 00000100fbcd44f8 0 54 6 55 51 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e3be68 0000000000000046 0000000000000000 000000000000006b
Jun 24 16:37:45 cert-o2 kernel: 0000000000000000 0000000000000008 ffffffff804499c0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 000001007feea030 00000000000003e4
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kswapd1 S 00000100fbcd1f08 0 52 1 53 38 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd1eb8 0000000000000046 ffffffff8013212a 0000000000100100
Jun 24 16:37:45 cert-o2 kernel: 0000000000200200 00000100fbcd1e48 00000100fbc7e030 0000000102c1db60
Jun 24 16:37:45 cert-o2 kernel: 00000100fbc7e030 0000000000000e3b
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013212a>{default_wake_function+0} <ffffffff8016308c>{kswapd+231}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f50>{schedule_tail+11}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80162fa5>{kswapd+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: kswapd0 S 00000100fbcd3f08 0 53 1 128 52 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd3eb8 0000000000000046 ffffffff804f7680 ffffffff0000007d
Jun 24 16:37:45 cert-o2 kernel: 000001007feea7f0 0000000000000000 ffffffff804499c0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 000001007feea7f0 00000000000009fe
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8016308c>{kswapd+231} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80130f01>{finish_task_switch+55} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80130f50>{schedule_tail+11} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80162fa5>{kswapd+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: aio/1 S 00000100fbcd4578 0 55 6 2741 54 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbcd7e68 0000000000000046 0000000000000000 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 0000000000000000 0000000000000008 000000000000231e 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 000001007fee07f0 0000000000000be9
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80145325>{worker_thread+226} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013217b>{__wake_up_common+67} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff80145243>{worker_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kseriod S 0000000000000000 0 128 1 212 53 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 0000010037e69ec8 0000000000000046 0000010037e69e18 000001000000007c
Jun 24 16:37:45 cert-o2 kernel: ffffffff80130749 0000000000000000 ffffffff804499c0 00000000fbccb788
Jun 24 16:37:45 cert-o2 kernel: 000001007fee0030 000000000000151b
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130749>{deactivate_task+37} <ffffffff80234370>{serio_thread+469}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80130f50>{schedule_tail+11} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801ee39a>{vgacon_cursor+0} <ffffffff801ee39a>{vgacon_cursor+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8023419b>{serio_thread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kjournald S 0000000000000000 0 212 1 886 128 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fb599e78 0000000000000046 000001007e9c5f58 0000010000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001fbdd2000
Jun 24 16:37:45 cert-o2 kernel: 00000100fbfb07f0 0000000000000180
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: udevd S 0000000000000006 0 886 1 1239 212 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fabebd78 0000000000000006 00000000fffffff4 ffffffff00000076
Jun 24 16:37:45 cert-o2 kernel: 000000d0fb7db030 0000000000000246 0000000000000256 000000000000d780
Jun 24 16:37:45 cert-o2 kernel: 0000010002e837f0 000000000000752b
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff8029fbaa>{datagram_poll+39}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187dd6>{sys_select+820} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kjournald S 000001007ffcadb4 0 1239 1 1240 886 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa315e78 0000000000000046 00000100fa315dc8 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100faf9a030 0000000000000076 0000010081b53bc0 00000001000003e8
Jun 24 16:37:45 cert-o2 kernel: 0000010037c147f0 00000000000032e9
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55}
Jun 24 16:37:45 cert-o2 kernel: <ffffffffa0005798>{:jbd:commit_timeout+0} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:45 cert-o2 kernel: <ffffffffa000579e>{:jbd:kjournald+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kjournald S 000001007ffcab9c 0 1240 1 1241 1239 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c8fe78 0000000000000046 00000100f9c8fdc8 0000010000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001000003e8
Jun 24 16:37:45 cert-o2 kernel: 000001007f9307f0 0000000000000b4b
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: kjournald S 000001007ffca984 0 1241 1 1242 1240 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa94fe78 0000000000000046 00000100fa94fdc8 0000010000000077
Jun 24 16:37:45 cert-o2 kernel: 00000100faf9a030 0000000000000077 0000010081b53bc0 00000001000003e8
Jun 24 16:37:45 cert-o2 kernel: 0000010037c467f0 00000000000013d0
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80130f01>{finish_task_switch+55}
Jun 24 16:37:45 cert-o2 kernel: <ffffffffa0005798>{:jbd:commit_timeout+0} <ffffffff80110c8f>{child_rip+8}
Jun 24 16:37:45 cert-o2 kernel: <ffffffffa000579e>{:jbd:kjournald+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kjournald S 0000000000000000 0 1242 1 1243 1241 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa8b3e78 0000000000000046 00000100fa8b3dc8 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f7f0 0000000000000076 0000010002c1edc0 00000001000003e8
Jun 24 16:37:45 cert-o2 kernel: 00000100faf9a7f0 0000000000001af0
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: kjournald S 0000000000000000 0 1243 1 1244 1242 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa94be78 0000000000000046 00000100f913e4d8 0000010000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001f913e4d8
Jun 24 16:37:45 cert-o2 kernel: 0000010037d3b7f0 0000000000000b88
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: kjournald S 000001007ffca33c 0 1244 1 1545 1243 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c8be78 0000000000000046 00000100f94ff4b0 0000010000000074
Jun 24 16:37:45 cert-o2 kernel: 0000010037c8d7f0 0000000000000074 0000010081b53bc0 0000000100000003
Jun 24 16:37:45 cert-o2 kernel: 0000010037d3b030 00000000000002bc
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffffa0005990>{:jbd:kjournald+498} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffffa0005798>{:jbd:commit_timeout+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffffa000579e>{:jbd:kjournald+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel: syslogd R running task 0 1545 1 1549 1244 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: klogd R running task 0 1549 1 1559 1545 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: irqbalance R running task 0 1559 1 1569 1549 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: portmap S 000001007fc1a280 0 1569 1 1588 1559 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f9c25e88 0000000000000002 00000100f9c25e48 0000001c00000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb12f7f0 0000000000000076 0000010081b53bc0 0000000100000246
Jun 24 16:37:45 cert-o2 kernel: 00000100fa858030 000000000000470f
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801337f2>{add_wait_queue+18}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff802c1eab>{tcp_poll+44} <ffffffff80188191>{sys_poll+610}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801875f1>{__pollwait+0} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: rpc.statd S 0000000000000007 0 1588 1 1618 1569 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fa6ebd78 0000000000000002 00000100fa1bcac0 ffffffff80299ac8
Jun 24 16:37:45 cert-o2 kernel: 0000000000000001 0000000000000246 000000d000000040 0000000100000246
Jun 24 16:37:45 cert-o2 kernel: 00000100fb12f7f0 0000000000005083
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80299ac8>{sock_recvmsg+284} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff802c1eab>{tcp_poll+44} <ffffffff80187a57>{do_select+939}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8018b225>{dput+56} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: rpc.idmapd R running task 0 1618 1 1672 1588 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: smartd S 0000000100178147 0 1672 1 1681 1618 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f98a3ee8 0000000000000002 0000010002feb690 0000010000000075
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f030 0000000000000075 0000010081b53bc0 000000018015d7e4
Jun 24 16:37:45 cert-o2 kernel: 00000100fbfac030 00000000000036e0
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013dbbc>{__mod_timer+293} <ffffffff802fc4ff>{schedule_timeout+244}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013e5e7>{process_timeout+0} <ffffffff8013e71a>{sys_nanosleep+192}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: acpid S 0000000000000005 0 1681 1 1690 1672 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f98b3d78 0000000000000002 00000100f98b3d98 0000000000000246
Jun 24 16:37:45 cert-o2 kernel: 00000100fa8fa398 00000001fa8fa408 0000000042bc6db4 0000000130b1ea40
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c030 00000000000255d6
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80187a57>{do_select+939}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8018f2c8>{dnotify_parent+34} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: cupsd R running task 0 1690 1 1740 1681 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: sshd S 0000010037d85d70 0 1740 1 2594 1781 1690 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f94e7d78 0000000000000002 0000010002f0a3c8 ffffffff00000074
Jun 24 16:37:45 cert-o2 kernel: 000001007d6af7f0 0000000000000074 0000010081b53bc0 0000000180130f01
Jun 24 16:37:45 cert-o2 kernel: 00000100fb7db7f0 00000000000001b3
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80187a57>{do_select+939}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: xinetd S 0000010037d85e88 0 1781 1 1800 1740 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f96dfd78 0000000000000006 0000000000000047 ffffffff00000076
Jun 24 16:37:45 cert-o2 kernel: 0000010037c787f0 0000000000000076 0000010081b53bc0 0000000100000246
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f030 0000000000012f31
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801810aa>{pipe_poll+47}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187dd6>{sys_select+820} <ffffffff80141e8e>{do_sigaction+490}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: sendmail R running task 0 1800 1 1808 1781 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: sendmail S 0000007fbfffd5f0 0 1808 1 1822 1800 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f93c3f68 0000000000000006 0000000000000000 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f7f0 0000000000000076 0000010081b53bc0 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 0000010037c8d030 000000000004a871
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80175cb9>{vfs_write+248} <ffffffff801422f8>{sys_pause+22}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: gpm S 0000000000000006 0 1822 1 1887 1808 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8c2bd78 0000000000000002 0000000137e460e8 0000000000000246
Jun 24 16:37:45 cert-o2 kernel: 0000000000000012 0000000000000001 ffffffff803e59e8 0000000100000001
Jun 24 16:37:45 cert-o2 kernel: 00000100faa27030 00000000000090bc
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8013dbbc>{__mod_timer+293} <ffffffff802fc4ff>{schedule_timeout+244}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013e5e7>{process_timeout+0} <ffffffff80187a57>{do_select+939}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801875f1>{__pollwait+0} <ffffffff80187dd6>{sys_select+820}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8018f2c8>{dnotify_parent+34} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: crond R running task 0 1887 1 1904 1822 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: atd R running task 0 1904 1 1913 1887 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: dbus-daemon-1 S 7fffffffffffffff 0 1913 1 1914 1904 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8eabe88 0000000000000006 00000100f8eabe18 0000000000000246
Jun 24 16:37:45 cert-o2 kernel: 0000010037e46f58 0000000000000000 00000100f8eabf50 00000000f8eabf50
Jun 24 16:37:45 cert-o2 kernel: 000001007f96e030 00000000000185ff
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff801337f2>{add_wait_queue+18}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80188191>{sys_poll+610} <ffffffff801875f1>{__pollwait+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d25>{sys_read+96} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: dbus-daemon-1 S 0000000000000000 0 1914 1 1925 1913 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8eedb28 0000000000000006 0000000000000000 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 0000000000000000 0000000000000000 0000000000000000 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 000001007f539030 00000000000026df
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff80133912>{prepare_to_wait_exclusive+21}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8029f485>{skb_recv_datagram+373} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff802b6017>{netlink_recvmsg+100}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80299ac8>{sock_recvmsg+284} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff802996cb>{sockfd_lookup+16} <ffffffff8029aefc>{sys_recvfrom+182}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801e0c50>{__up_read+15} <ffffffff80122659>{do_page_fault+509}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: hald R running task 0 1925 1 1932 1914 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: login S 0000000000000000 0 1932 1 2562 1933 1925 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100fbd47eb8 0000000000000002 0000011300000001 00000000ffffffff
Jun 24 16:37:45 cert-o2 kernel: 0000010037c8d7f0 0000000000000002 0000000000000001 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 00000100fbfb0030 0000000000001f7e
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff801421e8>{sys_rt_sigaction+97}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 000001007f8bd398 0 1933 1 1934 1932 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8d25d88 0000000000000006 0000000ff8987c58 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 00000100f8c257f0 000000000002ec0e
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802285a5>{complement_pos+12} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 000001007f6b9280 0 1934 1 1935 1933 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8c8bd88 0000000000000002 0000000ff89874b0 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f7f0 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 000001007f5397f0 000000000000dd86
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 000001007fc1a050 0 1935 1 1936 1934 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8dafd88 0000000000000002 0000000ffafcc050 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 000001007f96e7f0 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 00000100f91577f0 0000000000023096
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 0000010037c49a28 0 1936 1 1937 1935 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f8e25d88 0000000000000002 0000000f7f168b40 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 00000100fb77f7f0 000000000000fca7
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 000001007dc15398 0 1937 1 1938 1936 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f88cbd88 0000000000000002 0000000ff76e8c58 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 00000100fb7db030 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 000001007f4eb7f0 000000000001eb30
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: mingetty S 000001007fc1ae88 0 1938 1 1937 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f88ddd88 0000000000000002 0000000ff84d47f8 0000010000000076
Jun 24 16:37:45 cert-o2 kernel: 000001007f4eb7f0 0000000000000076 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 000001007f96e7f0 000000000001e690
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80156979>{find_get_page+65} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8021c209>{tty_read+230} <ffffffff80175ab3>{vfs_read+207}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175d0a>{sys_read+69} <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: kauditd S 000001007da03ee8 0 2561 7 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007da03ea8 0000000000000046 000001007da03df8 0000000000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 00000100f76a3030 00000000048cce03
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80149088>{keventd_create_kthread+0} <ffffffff80151b7c>{kauditd_thread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80151cf6>{kauditd_thread+378} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80149088>{keventd_create_kthread+0} <ffffffff8014905f>{kthread+200}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80110c8f>{child_rip+8} <ffffffff80149088>{keventd_create_kthread+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80148f97>{kthread+0} <ffffffff80110c87>{child_rip+0}
Jun 24 16:37:45 cert-o2 kernel:
Jun 24 16:37:45 cert-o2 kernel: bash S 0000000000000001 0 2562 1932 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f896bd88 0000000000000006 0000000000000000 0000000000000001
Jun 24 16:37:45 cert-o2 kernel: 0000000000000246 0000000000000246 00000100f896bd38 0000000100000206
Jun 24 16:37:45 cert-o2 kernel: 000001007f6287f0 000000000001478d
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80235879>{uart_start+38} <ffffffff802fc470>{schedule_timeout+101}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801337f2>{add_wait_queue+18} <ffffffff80221570>{read_chan+1059}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801c76ec>{avc_has_perm+70} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8021c209>{tty_read+230}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175ab3>{vfs_read+207} <ffffffff80175d0a>{sys_read+69}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: sshd S 00000100f8987a28 0 2594 1740 2596 2742 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007f7f9d78 0000000000000002 000001007fb099d0 0000000000000075
Jun 24 16:37:45 cert-o2 kernel: 0000010037cfd7f0 0000000000000075 0000010002c1edc0 0000000000000246
Jun 24 16:37:45 cert-o2 kernel: 00000100f76a37f0 00000000000013ad
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff802fc470>{schedule_timeout+101} <ffffffff8021be10>{tty_ldisc_deref+103}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187a57>{do_select+939} <ffffffff801875f1>{__pollwait+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80187dd6>{sys_select+820} <ffffffff8018f2c8>{dnotify_parent+34}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: bash S 0000007fbffff7a4 0 2596 2594 2732 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007de17eb8 0000000000000002 0000011300000113 0000000000000074
Jun 24 16:37:45 cert-o2 kernel: 0000010037cfd7f0 0000000000000074 0000010002c1edc0 0000000000000000
Jun 24 16:37:45 cert-o2 kernel: 0000010002e83030 0000000000002e74
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8011003e>{system_call+126}
Jun 24 16:37:45 cert-o2 kernel: auditd S 0000007fbfffe6d4 0 2732 2596 2740 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 000001007e817eb8 0000000000000006 0000011300000113 00000100f8a516d8
Jun 24 16:37:45 cert-o2 kernel: 000001007f90c120 0000000000000002 0000000000000113 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 0000010037cfd7f0 0000000000013304
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801101a2>{tracesys+209}
Jun 24 16:37:45 cert-o2 kernel: auditctl R running task 0 2740 2732 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: audit_list_ru R running task 0 2741 6 55 (L-TLB)
Jun 24 16:37:45 cert-o2 kernel: sshd S 0000010002feb654 0 2742 1740 2744 2594 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f6897bd8 0000000000000002 0000010037df69d8 0000010000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 00000001802a05fb
Jun 24 16:37:45 cert-o2 kernel: 000001007d6af7f0 0000000000000aba
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff8029cba6>{sock_def_readable+16} <ffffffff802f7553>{unix_stream_sendmsg+656}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff802fc470>{schedule_timeout+101} <ffffffff801338b6>{prepare_to_wait+21}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff802f7b05>{unix_stream_recvmsg+592} <ffffffff801339ba>{autoremove_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80299c6e>{sock_aio_read+297}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801759b8>{do_sync_read+173} <ffffffff801df486>{kobject_get+18}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801339ba>{autoremove_wake_function+0} <ffffffff80154137>{audit_syscall_entry+306}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff80175ac6>{vfs_read+226} <ffffffff80175d0a>{sys_read+69}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801101a2>{tracesys+209}
Jun 24 16:37:45 cert-o2 kernel: sshd R running task 0 2744 2742 2745 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: bash S 00000000fffffe00 0 2745 2744 2786 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f6a7feb8 0000000000000006 0000000100000001 0000000000000069
Jun 24 16:37:45 cert-o2 kernel: 00000100fa83c7f0 0000000000000069 0000010081b53bc0 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 0000010037c14030 0000000000001d99
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff80130f01>{finish_task_switch+55} <ffffffff801399f3>{do_wait+3298}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801101a2>{tracesys+209}
Jun 24 16:37:45 cert-o2 kernel: su S 0000007fbffff32c 0 2786 2745 2787 (NOTLB)
Jun 24 16:37:45 cert-o2 kernel: 00000100f89cfeb8 0000000000000006 0000011300000001 0000010037c4e4b8
Jun 24 16:37:45 cert-o2 kernel: 000001007f652058 0000000000000002 0000000000000001 0000000100000000
Jun 24 16:37:45 cert-o2 kernel: 00000100f83657f0 000000000000a236
Jun 24 16:37:45 cert-o2 kernel: Call Trace:<ffffffff801e0c50>{__up_read+15} <ffffffff801399f3>{do_wait+3298}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff8013212a>{default_wake_function+0} <ffffffff8013212a>{default_wake_function+0}
Jun 24 16:37:45 cert-o2 kernel: <ffffffff801101a2>{tracesys+209}
Jun 24 16:37:45 cert-o2 kernel: bash R running task 0 2787 2786 (NOTLB)
-------------- next part --------------
execve("/sbin/auditctl", ["/sbin/auditctl", "-w", "/tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "-k", "good-key"], [/* 20 vars */]) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
brk(0) = 0x510000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a95556000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=24476, ...}) = 0
mmap(NULL, 24476, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a95557000
close(3) = 0
open("/lib64/tls/libpthread.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at V\36033"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=106730, ...}) = 0
mmap(0x3333f00000, 1131384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333f00000
mprotect(0x3333f10000, 1065848, PROT_NONE) = 0
mmap(0x333400f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x333400f000
mmap(0x3334011000, 13176, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3334011000
close(3) = 0
open("/lib64/tls/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\305A33"..., 640) = 640
lseek(3, 624, SEEK_SET) = 624
read(3, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\4\0\0\0"..., 32) = 32
fstat(3, {st_mode=S_IFREG|0755, st_size=1489988, ...}) = 0
mmap(0x3333400000, 2301864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333400000
mprotect(0x3333529000, 1085352, PROT_NONE) = 0
mmap(0x3333628000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x128000) = 0x3333628000
mmap(0x333362e000, 16296, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x333362e000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555d000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555e000
mprotect(0x3333628000, 12288, PROT_READ) = 0
arch_prctl(0x1002, 0x2a9555dec0) = 0
munmap(0x2a95557000, 24476) = 0
set_tid_address(0x2a9555df50) = 2677
rt_sigaction(SIGRTMIN, {0x3333f051e0, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x3333f05260, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(0x3, 0x7fbffff7d0) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0x7fbffff5d0, 35, (nil), 0}) = 0
getuid() = 0
socket(PF_NETLINK, SOCK_RAW, 9) = 3
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
brk(0) = 0x510000
brk(0x531000) = 0x531000
write(2, "The base name of the path is too"..., 37) = 37
close(3) = 0
exit_group(0xffffffffffffffff, 0xffffffffffffffff, 0x7fbffff7c0, 0x1, 0x3c <unfinished ... exit status 255>
-------------- next part --------------
execve("/etc/init.d/auditd", ["/etc/init.d/auditd", "restart"], [/* 17 vars */]) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
brk(0) = 0x6bc000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a95556000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=24476, ...}) = 0
mmap(NULL, 24476, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a95557000
close(3) = 0
open("/lib64/libtermcap.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\20\360"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=15744, ...}) = 0
mmap(0x3333f00000, 1060400, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333f00000
mprotect(0x3333f03000, 1048112, PROT_NONE) = 0
mmap(0x3334002000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x3334002000
close(3) = 0
open("/lib64/libdl.so.2", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\17\220"..., 640) = 640
fstat(3, {st_mode=S_IFREG|0755, st_size=18007, ...}) = 0
mmap(0x3333900000, 1056968, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333900000
mprotect(0x3333902000, 1048776, PROT_NONE) = 0
mmap(0x3333a01000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x3333a01000
close(3) = 0
open("/lib64/tls/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\305A33"..., 640) = 640
lseek(3, 624, SEEK_SET) = 624
read(3, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\4\0\0\0"..., 32) = 32
fstat(3, {st_mode=S_IFREG|0755, st_size=1489988, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555d000
mmap(0x3333400000, 2301864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3333400000
mprotect(0x3333529000, 1085352, PROT_NONE) = 0
mmap(0x3333628000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x128000) = 0x3333628000
mmap(0x333362e000, 16296, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x333362e000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9555e000
mprotect(0x3333628000, 12288, PROT_READ) = 0
arch_prctl(0x1002, 0x2a9555e3e0) = 0
munmap(0x2a95557000, 24476) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
open("/dev/tty", O_RDWR|O_NONBLOCK) = 3
close(3) = 0
brk(0) = 0x6bc000
brk(0x6dd000) = 0x6dd000
open("/usr/lib/locale/locale-archive", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=39538224, ...}) = 0
mmap(NULL, 39538224, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a9555f000
close(3) = 0
getuid() = 0
getgid() = 0
geteuid() = 0
getegid() = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
open("/etc/mtab", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=443, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b14000
read(3, "/dev/hda5 / ext3 rw 0 0\nnone /pr"..., 4096) = 443
close(3) = 0
munmap(0x2a97b14000, 4096) = 0
open("/proc/meminfo", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b14000
read(3, "MemTotal: 4060324 kB\nMemFre"..., 1024) = 646
close(3) = 0
munmap(0x2a97b14000, 4096) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigaction(SIGQUIT, {SIG_IGN}, {SIG_DFL}, 8) = 0
uname({sys="Linux", node="cert-o2", ...}) = 0
stat("/root", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
getpid() = 2751
open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=21546, ...}) = 0
mmap(NULL, 21546, PROT_READ, MAP_SHARED, 3, 0) = 0x2a97b14000
close(3) = 0
getppid() = 2750
getpgrp() = 2750
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
open("/etc/init.d/auditd", O_RDONLY) = 3
ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fbffff710) = -1 ENOTTY (Inappropriate ioctl for device)
lseek(3, 0, SEEK_CUR) = 0
read(3, "#!/bin/bash\n#\n# auditd Th"..., 80) = 80
lseek(3, 0, SEEK_SET) = 0
getrlimit(0x7, 0x7fbffff750) = 0
dup2(3, 255) = 255
close(3) = 0
fcntl(255, F_SETFD, FD_CLOEXEC) = 0
fcntl(255, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE|0x8000)
fstat(255, {st_mode=S_IFREG|0755, st_size=2619, ...}) = 0
lseek(255, 0, SEEK_CUR) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
read(255, "#!/bin/bash\n#\n# auditd Th"..., 2619) = 2619
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/etc/init.d/functions", {st_mode=S_IFREG|0755, st_size=10721, ...}) = 0
access("/etc/init.d/functions", X_OK) = 0
open("/etc/init.d/functions", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0755, st_size=10721, ...}) = 0
read(3, "# -*-Shell-script-*-\n#\n# functio"..., 10721) = 10721
close(3) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
umask(022) = 022
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
pipe([3, 4]) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2752
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {0x433e50, [], 0x4000000}, 8) = 0
close(4) = 0
read(3, "pty\n", 128) = 4
read(3, "", 128) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 2}], WNOHANG, NULL) = 2752
wait4(-1, 0x7fbfffe914, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
close(3) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/etc/sysconfig/i18n", {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/i18n", {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
access("/etc/sysconfig/i18n", X_OK) = -1 EACCES (Permission denied)
open("/etc/sysconfig/i18n", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=80, ...}) = 0
read(3, "LANG=\"en_US.UTF-8\"\nSUPPORTED=\"en"..., 80) = 80
close(3) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/etc/sysconfig/init", {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/init", {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
access("/etc/sysconfig/init", X_OK) = -1 EACCES (Permission denied)
open("/etc/sysconfig/init", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=991, ...}) = 0
read(3, "# color => new RH6.0 bootup\n# ve"..., 991) = 991
close(3) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
open("/usr/share/locale/locale.alias", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=2528, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b1a000
read(3, "# Locale name alias data base.\n#"..., 4096) = 2528
read(3, "", 4096) = 0
close(3) = 0
munmap(0x2a97b1a000, 4096) = 0
open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en_US.utf8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en_US/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en.UTF-8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en.utf8/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/en/LC_MESSAGES/initscripts.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
brk(0x6fe000) = 0x6fe000
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
pipe([3, 4]) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
lseek(255, -1866, SEEK_CUR) = 753
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2754
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x433e50, [], 0x4000000}, {0x433e50, [], 0x4000000}, 8) = 0
close(4) = 0
read(3, "0\n", 128) = 2
read(3, "", 128) = 0
close(3) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG, NULL) = 2754
wait4(-1, 0x7fbfffef34, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
read(255, "\n# Check config\ntest -f /etc/sys"..., 2619) = 1866
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/etc/sysconfig/auditd", {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat("/etc/sysconfig/auditd", {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
access("/etc/sysconfig/auditd", X_OK) = -1 EACCES (Permission denied)
open("/etc/sysconfig/auditd", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0640, st_size=514, ...}) = 0
read(3, "# Add extra options here\nEXTRAOP"..., 514) = 514
close(3) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
access("/sbin/auditd", X_OK) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/etc/auditd.conf", {st_mode=S_IFREG|0640, st_size=372, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a97b1a000
write(1, "Stopping auditd: ", 17) = 17
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/var/run/auditd.pid", {st_mode=S_IFREG|0644, st_size=5, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/var/run/auditd.pid", O_RDONLY) = 3
fcntl(0, F_GETFD) = 0
fcntl(0, F_DUPFD, 10) = 10
fcntl(0, F_GETFD) = 0
fcntl(10, F_SETFD, FD_CLOEXEC) = 0
dup2(3, 0) = 0
close(3) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fbfffcb50) = -1 ENOTTY (Inappropriate ioctl for device)
lseek(0, 0, SEEK_CUR) = 0
read(0, "2738\n", 128) = 5
dup2(10, 0) = 0
fcntl(10, F_GETFD) = 0x1 (flags FD_CLOEXEC)
close(10) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/proc/2738", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
fcntl(2, F_GETFD) = 0
fcntl(2, F_DUPFD, 10) = 10
fcntl(2, F_GETFD) = 0
fcntl(10, F_SETFD, FD_CLOEXEC) = 0
dup2(1, 2) = 2
fcntl(1, F_GETFD) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/proc/2738", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
dup2(10, 2) = 2
fcntl(10, F_GETFD) = 0x1 (flags FD_CLOEXEC)
close(10) = 0
open("/dev/null", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 3
fcntl(1, F_GETFD) = 0
fcntl(1, F_DUPFD, 10) = 10
fcntl(1, F_GETFD) = 0
fcntl(10, F_SETFD, FD_CLOEXEC) = 0
dup2(3, 1) = 1
close(3) = 0
fcntl(2, F_GETFD) = 0
fcntl(2, F_DUPFD, 10) = 11
fcntl(2, F_GETFD) = 0
fcntl(11, F_SETFD, FD_CLOEXEC) = 0
dup2(1, 2) = 2
fcntl(1, F_GETFD) = 0
kill(2738, SIGTERM) = 0
dup2(11, 2) = 2
fcntl(11, F_GETFD) = 0x1 (flags FD_CLOEXEC)
close(11) = 0
dup2(10, 1) = 1
fcntl(10, F_GETFD) = 0x1 (flags FD_CLOEXEC)
close(10) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/usleep", 0x7fbfffc2a0) = -1 ENOENT (No such file or directory)
stat("/usr/sbin/usleep", 0x7fbfffc2a0) = -1 ENOENT (No such file or directory)
stat("/bin/usleep", {st_mode=S_IFREG|0755, st_size=31296, ...}) = 0
access("/bin/usleep", X_OK) = 0
stat("/bin/usleep", {st_mode=S_IFREG|0755, st_size=31296, ...}) = 0
access("/bin/usleep", X_OK) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
lseek(255, -14, SEEK_CUR) = 2605
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2755
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2755
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffc0c4, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/proc/2738", 0x7fbfffb0f0) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
stat("/proc/2738", 0x7fbfffbea0) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/initlog", {st_mode=S_IFREG|0755, st_size=43488, ...}) = 0
access("/sbin/initlog", X_OK) = 0
stat("/sbin/initlog", {st_mode=S_IFREG|0755, st_size=43488, ...}) = 0
access("/sbin/initlog", X_OK) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2756
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2756
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffc0d4, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[60G", 5) = 5
write(1, "[ ", 3) = 3
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[0;32m", 7) = 7
write(1, "OK", 2) = 2
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\33[0;39m", 7) = 7
write(1, " ]", 3) = 3
write(1, "\r", 1) = 1
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
stat(".", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
stat("/sbin/rm", 0x7fbfffd6e0) = -1 ENOENT (No such file or directory)
stat("/usr/sbin/rm", 0x7fbfffd6e0) = -1 ENOENT (No such file or directory)
stat("/bin/rm", {st_mode=S_IFREG|0755, st_size=41136, ...}) = 0
access("/bin/rm", X_OK) = 0
stat("/bin/rm", {st_mode=S_IFREG|0755, st_size=41136, ...}) = 0
access("/bin/rm", X_OK) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2757
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2757
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffd504, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
write(1, "\n", 1) = 1
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2758
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 2758
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
wait4(-1, 0x7fbfffe3b4, WNOHANG, NULL) = -1 ECHILD (No child processes)
rt_sigreturn(0xffffffffffffffff) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x432ba0, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2a9555e470) = 2759
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGINT, {0x432ba0, [], 0x4000000}, {SIG_DFL}, 8) = 0
wait4(-1,
More information about the Linux-audit
mailing list