Dear maintainers, I narrowed it further down with some more fprintfs. The problem is not in do_md.c but the call in hsymlnk in gen_list.c. Here the critical part of the output:
gen_list.c: hsymlnk: '/var/opt/lxc/no-network/lib64', '' gen_list.c: hsymlnk: len+1 == 0 checked_realloc(0x7fe4f1117290, 0) failed to reallocate 0 bytes ERROR: realloc: failed to allocate memory The variables in the first fprintf are line->fullpath and line->linkname. At the beginning of the aide run /var/opt/lxc/no-network/lib64 is the following symbolic link (basically an identical copy of the root /lib64): lrwxrwxrwx 1 ... /var/opt/lxc/no-network/lib64 -> usr/lib64/ Later (about 30 minutes after the start of dailyaidecheck) the whole "no-network" tree is deleted. This apparently leads to an empty linkname, readlink returns -1, which then results in a call to realloc with size 0. (I think the rest is now up to you. ;-) Best regards, Thomas -- 𝓣𝓱𝓸𝓶𝓪𝓼 𝓓𝓸𝓻𝓷𝓮𝓻
