DF-3193 / uaf_full.log
[887] === cycle 0 === [887] mounted /mnt/dfc (fd=5) [889] worker 0: statfs() ... [891] worker 2: statfs() ... [888] [889] [890] worker 0: statfs OK (unexpected) daemon: STARVING STATFS from now on worker 1: statfs() ... [892] worker 3: statfs() ... [888] daemon: WITHHOLDING reply for FUSE_STATFS unique=3 [887] umount -f /mnt/dfc ... [891] worker 2: statfs OK (unexpected) [888] daemon: WITHHOLDING reply for FUSE_STATFS unique=4 [892] worker 3: statfs OK (unexpected) [888] daemon: FUSE_DESTROY -> reply, exit, close(fd) => fmp freed [887] umount OK — fmp refcount now depends on daemon fd only [887] sprayed /dev/fuse opens; waiting for workers to wake on freed/recycled fmp ... [890] worker 1: statfs errno=16 (Device busy) — returned through freed-fmp path [887] cycle 0: workers reaped (kernel survived this round?) [887] === cycle 1 === [887] mount failed: Bad file descriptor