Weird Problem: All Services Are Stopping After running upcp from cron

[trhosting.net]

I have a weird problem for 1-2 weeks.
All services on the machine (except apache and mysql) are stopping. Today i saw that it is done after running upcp auto update from cron.

ps output before upcp:

root@mainframe [~]# ps ax
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:01 init [3]      
18407 ?        Ss     0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
30591 ?        Ss     0:00 /usr/sbin/sshd
25623 ?        Sl     1:54 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/mainfr
 3146 ?        Ss     0:00 /usr/local/apache/bin/httpd -DSSL
30441 ?        S      0:00 /usr/bin/perl /usr/local/cpanel/bin/leechprotect
30442 ?        S      0:07 /usr/local/apache/bin/httpd -DSSL
 2022 ?        S      0:12 /usr/local/apache/bin/httpd -DSSL
 6072 ?        S      0:08 /usr/local/apache/bin/httpd -DSSL
 6078 ?        S      0:16 /usr/local/apache/bin/httpd -DSSL
 6090 ?        S      0:09 /usr/local/apache/bin/httpd -DSSL
15963 ?        S      0:00 /usr/sbin/snmpd -Lsd -Lf /dev/null -p /var/run/snmpd -a
16141 ?        S      0:00 /usr/sbin/courierlogger -pid=/var/spool/authdaemon/pid -facility=mail -start /usr/libexec/courier-a
16142 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
16217 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
16220 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
16223 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
16224 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
16225 ?        S      0:00 /usr/libexec/courier-authlib/authdaemond
17582 ?        S      0:00 /usr/sbin/courierlogger -pid=/var/run/imapd.pid -start -name=imapd /usr/lib/courier-imap/libexec/co
17583 ?        S      0:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=30 -nodnslookup -noiden
17631 ?        S      0:00 /usr/sbin/courierlogger -pid=/var/run/imapd-ssl.pid -start -name=imapd-ssl /usr/lib/courier-imap/li
17632 ?        S      0:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=30 -nodnslookup -noiden
17637 ?        S      0:00 /usr/sbin/courierlogger -pid=/var/run/pop3d.pid -start -name=pop3d /usr/lib/courier-imap/libexec/co
17638 ?        S      0:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=30 -nodnslookup -noiden
17643 ?        S      0:00 /usr/sbin/courierlogger -pid=/var/run/pop3d-ssl.pid -start -name=pop3d-ssl /usr/lib/courier-imap/li
17644 ?        S      0:00 /usr/lib/courier-imap/libexec/couriertcpd -address=0 -maxprocs=40 -maxperip=30 -nodnslookup -noiden
17917 ?        Ss     0:00 /usr/sbin/exim -bd -q60m
17922 ?        Ss     0:00 /usr/sbin/exim -tls-on-connect -bd -oX 465
18004 ?        Ss     0:02 /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pid --max-children=5
18047 ?        S      0:13 spamd child
18048 ?        S      0:03 spamd child
18065 ?        S      0:01 /etc/authlib/authProg
18256 ?        S      0:00 cpbandwd
18257 ?        SN     0:00 cpanellogd - sleeping for logs
18280 ?        S      0:00 cpsrvd - waiting for connections
20152 ?        Ssl    0:02 /usr/sbin/named -u named
21631 ?        S      0:08 lfd - sleeping
28597 ?        S      0:01 /etc/authlib/authProg
30401 ?        Ss     0:00 crond
30485 ?        Ss     0:00 syslogd -m 0
32752 ?        Ss     0:00 /usr/sbin/exim -oX 26 -bd
 1328 ?        S      0:00 chkservd
11270 ?        S      0:01 /etc/authlib/authProg
16369 ?        Ss     0:00 pure-ftpd (SERVER)                                                                                 
16372 ?        S      0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth
22334 ?        S      0:01 /etc/authlib/authProg
 1432 ?        S      0:01 /etc/authlib/authProg
 1922 ?        S      0:00 crond
 1923 ?        Ss     0:00 cPanel Update (upcp) - Master
 1978 ?        Ss     0:00 cPanel Update (upcp) - Slave
 2005 ?        S      0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t
 5895 ?        S      0:00 /scripts/rpmup2
 6050 ?        S      0:00 /usr/bin/perl /usr/local/cpanel/bin/checkperlmodules
 6061 ?        S      0:00 /usr/bin/perl /scripts/perlinstaller version Apache::Admin::Config Archive::Tar Archive::Zip BSD::R
 6071 pts/2    Ss+    0:00 /usr/bin/perl /scripts/realperlinstaller version Apache::Admin::Config Archive::Tar Archive::Zip BS
15897 ?        Ss     0:00 sshd: root@pts/3 
15970 pts/3    Ss     0:00 -bash
17560 pts/3    R+     0:00 ps ax
root@mainframe [~]#

ps output after upcp:

root@mainframe [/scripts]# ps ax
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:01 init [3]      
18407 ?        Ss     0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
30591 ?        Ss     0:00 /usr/sbin/sshd
25623 ?        Sl     1:54 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/mainfr
 3146 ?        Ss     0:00 /usr/local/apache/bin/httpd -DSSL
30441 ?        S      0:00 /usr/bin/perl /usr/local/cpanel/bin/leechprotect
30442 ?        S      0:07 /usr/local/apache/bin/httpd -DSSL
 2022 ?        S      0:12 /usr/local/apache/bin/httpd -DSSL
 6072 ?        S      0:08 /usr/local/apache/bin/httpd -DSSL
 6078 ?        S      0:16 /usr/local/apache/bin/httpd -DSSL
 6090 ?        S      0:09 /usr/local/apache/bin/httpd -DSSL
30401 ?        Ss     0:00 crond
30485 ?        Ss     0:00 syslogd -m 0
15897 ?        Ss     0:00 sshd: root@pts/3 
15970 pts/3    Ss     0:00 -bash
22401 pts/3    R+     0:00 ps ax
root@mainframe [/scripts]#

Any idea?

cPanel version CURRENT 117

PS: I have checked the /scripts/postupcp file and it is blank. i upgraded to EDGE 2 days ago, but then dowgraded to CUREENT.