[root@localhost ~]# strace fatrace execve("/usr/sbin/fatrace", ["fatrace"], 0x7fff6c80b940 /* 27 vars */) = 0 brk(NULL) = 0x18ee000 arch_prctl(0x3001 /* ARCH_??? */, 0x7ffd05b9a4e0) = -1 EINVAL (Invalid argument) access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=92770, ...}) = 0 mmap(NULL, 92770, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7efc4b949000 close(3) = 0 openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200q\2\0\0\0\0\0"..., 832) = 832 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 pread64(3, "\4\0\0\0\20\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0", 32, 848) = 32 pread64(3, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\200^|\234\340?\21\366\230\224_t\345Y]\320"..., 68, 880) = 68 fstat(3, {st_mode=S_IFREG|0755, st_size=3185792, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc4b947000 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 pread64(3, "\4\0\0\0\20\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0", 32, 848) = 32 pread64(3, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\200^|\234\340?\21\366\230\224_t\345Y]\320"..., 68, 880) = 68 mmap(NULL, 1872744, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7efc4b77d000 mmap(0x7efc4b7a2000, 1376256, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x25000) = 0x7efc4b7a2000 mmap(0x7efc4b8f2000, 307200, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x175000) = 0x7efc4b8f2000 mmap(0x7efc4b93d000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1bf000) = 0x7efc4b93d000 mmap(0x7efc4b943000, 13160, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc4b943000 close(3) = 0 arch_prctl(ARCH_SET_FS, 0x7efc4b948580) = 0 mprotect(0x7efc4b93d000, 12288, PROT_READ) = 0 mprotect(0x404000, 4096, PROT_READ) = 0 mprotect(0x7efc4b98c000, 4096, PROT_READ) = 0 munmap(0x7efc4b949000, 92770) = 0 getpid() = 10161 fanotify_init(FAN_CLASS_NOTIF|FAN_REPORT_FID, O_RDONLY) = 3 fanotify_mark(3, FAN_MARK_ADD|FAN_MARK_FILESYSTEM, FAN_ACCESS|FAN_MODIFY|FAN_CLOSE_WRITE|FAN_CLOSE_NOWRITE|FAN_OPEN|FAN_MOVED_FROM|FAN_MOVED_TO|FAN_CREATE|FAN_DELETE|FAN_ONDIR|FAN_EVENT_ON_CHILD, AT_FDCWD, "/") = -1 EXDEV (Invalid cross-device link) write(2, "fatrace: ", 9fatrace: ) = 9 write(2, "Failed to add watch for /", 25Failed to add watch for /) = 25 write(2, ": Invalid cross-device link\n", 28: Invalid cross-device link ) = 28 openat(AT_FDCWD, "/", O_RDONLY|O_NOFOLLOW) = 4 fstatfs(4, {f_type=BTRFS_SUPER_MAGIC, f_bsize=4096, f_blocks=25171712, f_bfree=24284752, f_bavail=23849696, f_files=0, f_ffree=0, f_fsid={val=[991752296, 777997763]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOATIME}) = 0 brk(NULL) = 0x18ee000 brk(0x190f000) = 0x190f000 brk(NULL) = 0x190f000 openat(AT_FDCWD, "/proc/self/mounts", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 read(5, "sysfs /sys sysfs rw,seclabel,nos"..., 1024) = 1024 access("sysfs", F_OK) = -1 ENOENT (No such file or directory) access("proc", F_OK) = -1 ENOENT (No such file or directory) access("devtmpfs", F_OK) = -1 ENOENT (No such file or directory) access("securityfs", F_OK) = -1 ENOENT (No such file or directory) access("tmpfs", F_OK) = -1 ENOENT (No such file or directory) access("devpts", F_OK) = -1 ENOENT (No such file or directory) access("tmpfs", F_OK) = -1 ENOENT (No such file or directory) access("cgroup2", F_OK) = -1 ENOENT (No such file or directory) access("pstore", F_OK) = -1 ENOENT (No such file or directory) access("none", F_OK) = -1 ENOENT (No such file or directory) access("configfs", F_OK) = -1 ENOENT (No such file or directory) access("/dev/vda2", F_OK) = 0 access("selinuxfs", F_OK) = -1 ENOENT (No such file or directory) read(5, "ect,pipe_ino=18706 0 0\nmqueue /d"..., 1024) = 776 access("systemd-1", F_OK) = -1 ENOENT (No such file or directory) access("mqueue", F_OK) = -1 ENOENT (No such file or directory) access("hugetlbfs", F_OK) = -1 ENOENT (No such file or directory) access("debugfs", F_OK) = -1 ENOENT (No such file or directory) access("tmpfs", F_OK) = -1 ENOENT (No such file or directory) access("fusectl", F_OK) = -1 ENOENT (No such file or directory) access("/dev/vda2", F_OK) = 0 fanotify_mark(3, FAN_MARK_ADD|FAN_MARK_FILESYSTEM, FAN_ACCESS|FAN_MODIFY|FAN_CLOSE_WRITE|FAN_CLOSE_NOWRITE|FAN_OPEN|FAN_MOVED_FROM|FAN_MOVED_TO|FAN_CREATE|FAN_DELETE|FAN_ONDIR|FAN_EVENT_ON_CHILD, AT_FDCWD, "/home") = -1 EXDEV (Invalid cross-device link) write(2, "fatrace: ", 9fatrace: ) = 9 write(2, "Failed to add watch for /home", 29Failed to add watch for /home) = 29 write(2, ": Invalid cross-device link\n", 28: Invalid cross-device link ) = 28 openat(AT_FDCWD, "/home", O_RDONLY|O_NOFOLLOW) = 6 fstatfs(6, {f_type=BTRFS_SUPER_MAGIC, f_bsize=4096, f_blocks=25171712, f_bfree=24284752, f_bavail=23849696, f_files=0, f_ffree=0, f_fsid={val=[991752296, 777997761]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOATIME}) = 0 access("/dev/vda1", F_OK) = 0 fanotify_mark(3, FAN_MARK_ADD|FAN_MARK_FILESYSTEM, FAN_ACCESS|FAN_MODIFY|FAN_CLOSE_WRITE|FAN_CLOSE_NOWRITE|FAN_OPEN|FAN_MOVED_FROM|FAN_MOVED_TO|FAN_CREATE|FAN_DELETE|FAN_ONDIR|FAN_EVENT_ON_CHILD, AT_FDCWD, "/boot") = 0 openat(AT_FDCWD, "/boot", O_RDONLY|O_NOFOLLOW) = 7 fstatfs(7, {f_type=EXT2_SUPER_MAGIC, f_bsize=4096, f_blocks=249830, f_bfree=193936, f_bavail=176733, f_files=65536, f_ffree=65121, f_fsid={val=[649350589, 786961665]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_RELATIME}) = 0 access("sunrpc", F_OK) = -1 ENOENT (No such file or directory) access("tmpfs", F_OK) = -1 ENOENT (No such file or directory) access("tmpfs", F_OK) = -1 ENOENT (No such file or directory) read(5, "", 1024) = 0 close(5) = 0 mmap(NULL, 270336, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc4b73b000 rt_sigaction(SIGINT, {sa_handler=0x402160, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7efc4b7b9ac0}, NULL, 8) = 0 read(3, "4\0\0\0\3\0\30\0 \0\0@\0\0\0\0\377\377\377\377\261'\0\0\1\0\34\0\275M\264&"..., 262144) = 52 read(3, ^C0x7efc4b73c000, 262144) = ? ERESTARTSYS (To be restarted if SA_RESTART is set) strace: Process 10161 detached [root@localhost ~]#