my ubuntu pc crashed twice in about 6 hours....
 

I am providing here my investigation (i tried) after the latest crash. the server is running in VM on windows xp host.
I am suspecting rsyslog and NTP, but not sure how to fix...
pl advice.


it is 10.10 desktop edition.


reboot** system boot* 2.6.35-32-generi Sat Sep 22 04:30 - 04:33* (00:03)

root@mypc:/var/log# uname -a
Linux mypc 2.6.35-32-generic #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 i686 GNU/Linux
root@mypc:/var/log#


-rw-r--r-- 1 root************* root* 30245 2012-09-21 23:24 Xorg.0.log.old
-rw-r--r-- 1 root************* root 228862 2012-09-22 04:30 udev
-rw-r----- 1 root************* adm** 81021 2012-09-22 04:30 dmesg
-rw-r--r-- 1 root************* root*** 486 2012-09-22 04:30 boot.log
drwxrwx--T 2 root************* gdm*** 4096
2012-09-22 04:30 gdm
-rw-r--r-- 1 root************* root** 9846 2012-09-22 04:30 pm-powersave.log
-rw-rw-r-- 1 root************* utmp 292876 2012-09-22 04:31 lastlog
-rw-r----- 1 syslog*********** adm* 145961 2012-09-22 04:49 messages
-rw-r----- 1 syslog*********** adm* 250708 2012-09-22 04:49 kern.log
-rw-r----- 1 syslog*********** adm* 108750 2012-09-22 04:49 debug
-rw-r--r-- 1 root************* root* 27938 2012-09-22 04:49 Xorg.0.log
-rw-rw-r-- 1 root************* utmp 244992
2012-09-22 04:49 wtmp
-rw-r----- 1 syslog*********** adm** 88257 2012-09-22 04:52 auth.log
-rw-r----- 1 syslog*********** adm** 13585 2012-09-22 04:52 user.log
-rw-r----- 1 syslog*********** adm* 309706 2012-09-22 04:52 syslog
-rw-r----- 1 syslog*********** adm** 82197 2012-09-22 04:53 daemon.log




messages:

Sep 21 21:07:48 mypc kernel: [** 30.378950] acpiphp_glue: Slot 261 already registered by another hotplug driver
Sep 21 21:07:48 mypc kernel: [** 30.378999] acpiphp_glue: Slot 262 already registered by another hotplug driver
Sep 21 21:07:48 mypc kernel: [** 30.379049] acpiphp_glue: Slot 263 already registered by another hotplug
driver
Sep 21 21:08:24 mypc kernel: [** 38.802739] audit_printk_skb: 27 callbacks suppressed
Sep 21 21:08:24 mypc kernel: [** 38.803087] type=1400 audit(1348261704.289:21): apparmor="DENIED" operation="capable" parent=1755 profile="" pid=1763 comm="serial" capability=21* capname="sys_admin"
Sep 21 21:08:30 mypc kernel: [** 44.583496] EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro,commit=0
Sep 21 23:24:56 mypc kernel: Kernel logging (proc) stopped.
Sep 21 23:24:56 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="734" x-info="http://www.rsyslog.com"] exiting on signal 15.
Sep 22 04:30:20 mypc kernel: imklog 4.2.0, log source = /proc/kmsg started.
Sep 22 04:30:20 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="698" x-info="http://www.rsyslog.com"] (re)start
Sep 22 04:30:20 mypc rsyslogd: rsyslogd's groupid changed to 103
Sep 22 04:30:20
mypc rsyslogd: rsyslogd's userid changed to 101
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Initializing cgroup subsys cpuset
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Initializing cgroup subsys cpu
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Linux version 2.6.35-32-generic (buildd@vernadsky) (gcc version 4.4.5 (Ubuntu/Linaro 4.4.4-14ubuntu5) ) #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 (Ubuntu 2.6.35-32.67-generic 2.6.35.14)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] BIOS-provided physical RAM map:
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 0000000000000000 - 000000000009f800 (usable)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 00000000000ca000 - 00000000000cc000 (reserved)
Sep 22
04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 00000000000dc000 - 0000000000100000 (reserved)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 0000000000100000 - 000000003fef0000 (usable)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 000000003fef0000 - 000000003feff000 (ACPI data)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 000000003feff000 - 000000003ff00000 (ACPI NVS)
Sep 22 04:30:20 mypc kernel: [*** 0.000000]* BIOS-e820: 000000003ff00000 - 0000000040000000 (usable)
...
...
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Notice: NX (Execute Disable) protection missing in CPU or disabled in BIOS!
Sep 22 04:30:20 mypc kernel: [*** 0.000000] NX (Execute Disable) protection: approximated by x86 segment limits
Sep 22 04:30:20 mypc kernel: [*** 0.000000] DMI
present.
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Phoenix BIOS detected: BIOS may corrupt low RAM, working around it.
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Hypervisor detected: VMware
Sep 22 04:30:20 mypc kernel: [*** 0.000000] last_pfn = 0x40000 max_arch_pfn = 0x100000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] x86 PAT enabled: cpu 0, old 0x0, new 0x7010600070106
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Scanning 0 areas for low memory corruption
Sep 22 04:30:20 mypc kernel: [*** 0.000000] modified physical RAM map:
...
...
Sep 22 04:30:20 mypc kernel: [*** 0.000000] found SMP MP-table at [c00f6bc0] f6bc0
Sep 22 04:30:20 mypc kernel: [*** 0.000000] init_memory_mapping: 0000000000000000-00000000377fe000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] RAMDISK: 2f524000 -
2ff74000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: RSDP 000f6b50 00024 (v02 PTLTD )
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: XSDT 3fef03cc 00054 (v01 INTEL* 440BX*** 06040000 VMW* 01324272)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: FACP 3fefee98 000F4 (v04 INTEL* 440BX*** 06040000 PTL* 000F4240)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: DSDT 3fef05c8 0E8D0 (v01 PTLTD* Custom** 06040000 MSFT 03000001)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: FACS 3fefffc0 00040
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: BOOT 3fef05a0 00028 (v01 PTLTD* $SBFTBL$ 06040000* LTP 00000001)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: APIC 3fef0550 00050 (v01 PTLTD* ? APIC** 06040000* LTP 00000000)
Sep 22
04:30:20 mypc kernel: [*** 0.000000] ACPI: MCFG 3fef0514 0003C (v01 PTLTD* $PCITBL$ 06040000* LTP 00000001)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: SRAT 3fef0484 00090 (v02 VMWARE MEMPLUG* 06040000 VMW* 00000001)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] ACPI: WAET 3fef045c 00028 (v01 VMWARE VMW WAET 06040000 VMW* 00000001)
Sep 22 04:30:20 mypc kernel: [*** 0.000000] 136MB HIGHMEM available.
Sep 22 04:30:20 mypc kernel: [*** 0.000000] 887MB LOWMEM available.
Sep 22 04:30:20 mypc kernel: [*** 0.000000]** mapped low ram: 0 - 377fe000
Sep 22 04:30:20 mypc kernel: [*** 0.000000]** low ram: 0 - 377fe000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Zone PFN ranges:
Sep 22 04:30:20 mypc kernel: [*** 0.000000]**
DMA***** 0x00000010 -> 0x00001000
Sep 22 04:30:20 mypc kernel: [*** 0.000000]** Normal** 0x00001000 -> 0x000377fe
Sep 22 04:30:20 mypc kernel: [*** 0.000000]** HighMem* 0x000377fe -> 0x00040000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Movable zone start PFN for each node
Sep 22 04:30:20 mypc kernel: [*** 0.000000] early_node_map[3] active PFN ranges
Sep 22 04:30:20 mypc kernel: [*** 0.000000]**** 0: 0x00000010 -> 0x0000009f
Sep 22 04:30:20 mypc kernel: [*** 0.000000]**** 0: 0x00000100 -> 0x0003fef0
Sep 22 04:30:20 mypc kernel: [*** 0.000000]**** 0: 0x0003ff00 -> 0x00040000
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Using APIC driver default
Sep 22 04:30:20 mypc kernel:
[*** 0.000000] ACPI: PM-Timer IO Port: 0x1008
...
...




syslog:

Sep 21 22:39:01 mypc CRON[3346]: (root) CMD (* [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete)
Sep 21 22:43:47 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu
Sep 21 22:59:50 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu
Sep 21 23:09:01 mypc CRON[3593]: (root) CMD (* [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) -delete)
Sep 21 23:15:52 mypc ntpd_initres[1709]: host name not found: wuarchive.wustl.edu
Sep 21 23:17:01 mypc CRON[3647]: (root) CMD (** cd / && run-parts --report /etc/cron.hourly)
Sep 21 23:24:56
mypc kernel: Kernel logging (proc) stopped.
Sep 21 23:24:56 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="734" x-info="http://www.rsyslog.com"] exiting on signal 15.
Sep 22 04:30:20 mypc kernel: imklog 4.2.0, log source = /proc/kmsg started.
Sep 22 04:30:20 mypc rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="698" x-info="http://www.rsyslog.com"] (re)start
Sep 22 04:30:20 mypc rsyslogd: rsyslogd's groupid changed to 103
Sep 22 04:30:20 mypc rsyslogd: rsyslogd's userid changed to 101
Sep 22 04:30:20 mypc rsyslogd-2039: Could no open output file '/dev/xconsole' [try http://www.rsyslog.com/e/2039 ]
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Initializing cgroup subsys cpuset
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Initializing cgroup subsys cpu
Sep 22 04:30:20 mypc kernel: [*** 0.000000] Linux version 2.6.35-32-generic (buildd@vernadsky) (gcc
version 4.4.5 (Ubuntu/Linaro 4.4.4-14ubuntu5) ) #67-Ubuntu SMP Mon Mar 5 19:35:26 UTC 2012 (Ubuntu 2.6.35-32.67-generic 2.6.35.14)





# tail -30 pm-powersave.log

/usr/lib/pm-utils/power.d/intel-audio-powersave false: success.
Running hook /usr/lib/pm-utils/power.d/journal-commit false:
Setting journal commit time for / to 0...Done.

/usr/lib/pm-utils/power.d/journal-commit false: success.
Running hook /usr/lib/pm-utils/power.d/laptop-mode false:
Laptop mode disabled.

/usr/lib/pm-utils/power.d/laptop-mode false: success.
Running hook /usr/lib/pm-utils/power.d/pcie_aspm false:

/usr/lib/pm-utils/power.d/pcie_aspm false: success.
Running hook /usr/lib/pm-utils/power.d/readahead false:
Setting readahead for /dev/sda1 to 256...Done.

/usr/lib/pm-utils/power.d/readahead false: success.
Running hook /usr/lib/pm-utils/power.d/sata_alpm false:

/usr/lib/pm-utils/power.d/sata_alpm
false: success.
Running hook /usr/lib/pm-utils/power.d/sched-powersave false:
**sched policy powersave OFF

/usr/lib/pm-utils/power.d/sched-powersave false: success.
Running hook /usr/lib/pm-utils/power.d/wireless false:

/usr/lib/pm-utils/power.d/wireless false: success.
Running hook /usr/lib/pm-utils/power.d/xfs_buffer false:

/usr/lib/pm-utils/power.d/xfs_buffer false: success.







root@mypc:/var/log# tail dmesg.0
[** 27.453584] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input2
[** 27.871867] ENS1371 0000:02:02.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
[** 28.308390] ADDRCONF(NETDEV_UP): eth0: link is not ready
[** 28.328124] type=1400 audit(1348261666.724:6): apparmor="STATUS" operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" pid=779 comm="apparmor_parser"
[**
28.335947] type=1400 audit(1348261666.732:7): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient3" pid=781 comm="apparmor_parser"
[** 28.336757] type=1400 audit(1348261666.732:8): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=781 comm="apparmor_parser"
[** 28.337042] type=1400 audit(1348261666.732:9): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=781 comm="apparmor_parser"
[** 28.369429] type=1400 audit(1348261666.764:10): apparmor="STATUS" operation="profile_load" name="/usr/bin/evince" pid=782 comm="apparmor_parser"
[** 28.375834] type=1400 audit(1348261666.772:11): apparmor="STATUS" operation="profile_load" name="/usr/bin/evince-previewer" pid=782 comm="apparmor_parser"
[** 29.659154] ADDRCONF(NETDEV_CHANGE): eth0: link becomes
ready




root@mypc:/var/log#
root@mypc:/var/log#
root@mypc:/var/log#
root@mypc:/var/log#
root@mypc:/var/log# tail -30 Xorg.0.log.old
[* 8231.710] 4: /usr/lib/xorg/modules/drivers/vmwlegacy_drv.so (0xca5000+0x6b57) [0xcabb57]
[* 8231.710] 5: /usr/lib/xorg/modules/drivers/vmwlegacy_drv.so (0xca5000+0x50da) [0xcaa0da]
[* 8231.710] 6: /usr/lib/xorg/modules/libshadowfb.so (0x2d9000+0x5a6e) [0x2dea6e]
[* 8231.710] 7: /usr/bin/X (0x8048000+0x1580a4) [0x81a00a4]
[* 8231.710] 8: /usr/bin/X (0x8048000+0xdc2bf) [0x81242bf]
[* 8231.711] 9: /usr/bin/X (0x8048000+0x55f1e) [0x809df1e]
[* 8231.711] 10: /usr/bin/X (0x8048000+0x165cd0) [0x81adcd0]
[* 8231.711] 11: /usr/bin/X (0x8048000+0x1486a0) [0x81906a0]
[* 8231.711] 12: /usr/bin/X (0x8048000+0x732ae) [0x80bb2ae]
[* 8231.711] 13: /usr/lib/xorg/modules/extensions/libextmod.so (0x1b2000+0xae4a)
[0x1bce4a]
[* 8231.720] 14: /usr/bin/X (0x8048000+0xbf895) [0x8107895]
[* 8231.720] 15: /usr/bin/X (0x8048000+0x80f87) [0x80c8f87]
[* 8231.720] 16: /usr/bin/X (0x8048000+0x133e11) [0x817be11]
[* 8231.721] 17: /usr/bin/X (0x8048000+0xa7498) [0x80ef498]
[* 8231.721] 18: /usr/bin/X (0x8048000+0x17578d) [0x81bd78d]
[* 8231.721] 19: /usr/bin/X (0x8048000+0xa31c6) [0x80eb1c6]
[* 8231.721] 20: /usr/lib/xorg/modules/extensions/libglx.so (0xbeb000+0x38eaa) [0xc23eaa]
[* 8231.721] 21: /usr/bin/X (0x8048000+0x1a67c) [0x806267c]
[* 8231.722] 22: /lib/libc.so.6 (__libc_start_main+0xe7) [0x8bfce7]
[* 8231.722] 23: /usr/bin/X (0x8048000+0x1a1b1) [0x80621b1]
[* 8231.728] Segmentation fault at address 0x11
[* 8231.740]
Caught signal 11 (Segmentation fault). Server aborting
[* 8231.740]
Please consult the The X.Org Foundation
support
******** at http://wiki.x.org
*for help.
[* 8231.740] Please also check the log file at "/var/log/Xorg.0.log" for additional information.
[* 8231.740]
[* 8231.954]* ddxSigGiveUp: Closing log
root@mypc:/var/log#





/var/log/gdm

-rw-r--r-- 1 root root 20857 2012-09-21 21:05 :0.log.2
-rw-r--r-- 1 root root** 624 2012-09-21 21:08 :0-slave.log.1
-rw-r--r-- 1 gdm* gdm** 2323 2012-09-21 21:08 :0-greeter.log.1
-rw-r--r-- 1 root root 20788 2012-09-21 23:24 :0.log.1
-rw-r--r-- 1 root root** 625 2012-09-22 04:49 :0-slave.log
-rw-r--r-- 1 gdm* gdm** 2157 2012-09-22 04:49 :0-greeter.log
-rw-r--r-- 1 root root 19085 2012-09-22 05:04 :0.log


root@mypc:/var/log/gdm# tail :0-greeter.log
Window manager warning: meta_window_activate called by a pager with a 0 timestamp; the
pager needs to be fixed.

(gnome-power-manager:1859): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed

(gnome-power-manager:1859): Gtk-WARNING **: A floating object was finalized. This means that someone
called g_object_unref() on an object that had only a floating
reference; the initial floating reference is not owned by anyone
and must be removed with g_object_ref_sink().
Window manager warning: CurrentTime used to choose focus window; focus window may not be correct.
Window manager warning: Got a request to focus the no_focus_window with a timestamp of 0.* This shouldn't happen!
root@mypc:/var/log/gdm#







I am also suspecting NTP.

rp1396@mypc:/var/log$ ntpq -p
**** remote********** refid***** st t when poll reach** delay**
offset* jitter
================================================== ============================
*europium.canoni .INIT.********* 16 u*** -** 64*** 0*** 0.000*** 0.000** 0.000
rp1396@mypc:/var/log$
rp1396@mypc:/var/log$ nslookup ntp.ubuntu.com
Server:******** _personal_ip.9
Address:******* _personal_ip.9#53

Non-authoritative answer:
Name:** ntp.ubuntu.com
Address: 91.189.94.4

rp1396@mypc:/var/log$ grep -v "^#" /etc/ntp.conf* | grep -v ^$
driftfile /var/lib/ntp/ntp.drift
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
restrict -4 default kod
notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery
restrict 127.0.0.1
restrict ::1
server ntp.ubuntu.com
rp1396@mypc:/var/log$




I also get:

policykit authntication agent not responding.

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users