Restoring (join-ns) in user namespace fails #2651
Description
When trying to restore a container with a user namespace I run into the following issue:
[...]
(00.000765) Warn (criu/namespaces.c:55): join-ns with user-namespace is not fully tested and dangerous
[...]
(00.003748) Forking task with 1 pid (flags 0x7c028000)
(00.003751) Creating process using clone3()
(00.004040) PID: real 7243 virt 1
(00.004129) Wait until namespaces are created
(00.004125) 1: Found id extRootNetNS (fd 18) in inherit fd list
(00.004194) 1: Error (criu/namespaces.c:258): Can't setns 18/net: Operation not permitted
(00.004208) 1: Error (criu/cr-restore.c:1559): Can't unshare net-namespace: Operation not permitted
(00.004700) uns: calling exit_usernsd (-1, 1)
(00.004733) uns: daemon calls 0x564b8458c110 (7239, -1, 1)
(00.004748) uns: `- daemon exits w/ 0
(00.005220) uns: daemon stopped
(00.005227) Error (criu/cr-restore.c:2320): Restoring FAILED.
(00.005666) Error (criu/cgroup.c:1998): cg: cgroupd: recv req error: No such file or directory
Based on that warning, I figure this is not really supported/tested right now? The issue seems somewhat similar to #2597 but in my case it already fails earlier when creating the namespaces.
Some more details about my setup, I'm running criu restore through runc on Kubernetes with zeropod. My container is the same as this example with hostUsers: false added in the pod spec.
$ criu --version
Version: 4.1
GitID: v4.1
$ runc --version
runc version 1.2.3
commit: v1.2.3-0-g0d37cfd
spec: 1.2.0
go: go1.23.6
libseccomp: 2.5.4
$ containerd --version
containerd github.com/containerd/containerd/v2 v2.0.2 c507a0257ea6462fbd6f5ba4f5c74facb04021f4
full restore.log
(00.000000) Parsing config file /etc/criu/default.conf
(00.000000) Unable to get $HOME directory, local configuration file will not be used.
(00.000000) CRIU run id = a1516cf6-f669-48eb-8b19-1d123ba38d28
(00.000000) CRIU run id = b3a3ee0e-d0dc-4cfd-8dee-f7c59f33e4bc
(00.000120) Version: 4.1 (gitid v4.1)
(00.000129) Running on kind-worker Linux 6.13.8-200.fc41.x86_64 #1 SMP PREEMPT_DYNAMIC Sun Mar 23 05:03:09 UTC 2025 x86_64
(00.000132) Would overwrite RPC settings with values from /etc/criu/runc.conf
(00.000153) Loaded kdat cache from /run/criu.kdat
(00.000174) Hugetlb size 2 Mb is supported but cannot get dev's number
(00.000186) Hugetlb size 1024 Mb is supported but cannot get dev's number
(00.000617) cpu: x86_family 25 x86_vendor_id AuthenticAMD x86_model_id AMD Ryzen 9 5900X 12-Core Processor
(00.000633) cpu: fpu: xfeatures_mask 0x205 xsave_size 2440 xsave_size_max 2440 xsaves_size 856
(00.000639) cpu: fpu: x87 floating point registers xstate_offsets 0 / 0 xstate_sizes 160 / 160
(00.000644) cpu: fpu: AVX registers xstate_offsets 576 / 576 xstate_sizes 256 / 256
(00.000648) cpu: fpu: Protection Keys User registers xstate_offsets 2432 / 832 xstate_sizes 8 / 8
(00.000715) Added ipc:/proc/6895/ns/ipc join namespace
(00.000727) Added uts:/proc/6895/ns/uts join namespace
(00.000735) Added user:/proc/6895/ns/user join namespace
(00.000756) Will skip in-flight TCP connections
(00.000761) Will drop all TCP connections on restore
(00.000765) Warn (criu/namespaces.c:55): join-ns with user-namespace is not fully tested and dangerous
(00.000776) rlimit: RLIMIT_NOFILE unlimited for self
(00.000812) Dump CRIU run id = 279e3065-88f4-4bc7-bc73-53b284b7e59a
(00.000851) cpu: fpu:1 fxsr:1 xsave:1 xsaveopt:1 xsavec:1 xgetbv1:1 xsaves:1
(00.000882) kernel pid_max=4194304
(00.000887) Reading image tree
(00.000911) Add mnt ns 13 pid 1
(00.000915) Add net ns 10 pid 1
(00.000919) Add pid ns 9 pid 1
(00.001094) pstree pid_max=52
(00.001102) Will restore in 7c020000 namespaces
(00.001106) NS mask to use 7c020000
(00.001141) Collecting 51/56 (flags 3)
(00.001156) `- ... done
(00.001165) Collecting 40/54 (flags 2)
(00.001175) Collected [usr/sbin/nginx] ID 0x1
(00.001180) Collected [usr/lib/x86_64-linux-gnu/libc.so.6] ID 0x2
(00.001186) Collected [usr/lib/x86_64-linux-gnu/libz.so.1.2.13] ID 0x3
(00.001190) Collected [usr/lib/x86_64-linux-gnu/libcrypto.so.3] ID 0x4
(00.001194) Collected [usr/lib/x86_64-linux-gnu/libssl.so.3] ID 0x5
(00.001198) Collected [usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.11.2] ID 0x6
(00.001202) Collected [usr/lib/x86_64-linux-gnu/libcrypt.so.1.1.0] ID 0x7
(00.001207) Collected [usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2] ID 0x9
(00.001211) Collected [dev/null] ID 0xa
(00.001215) Collected pipe entry ID 0xb PIPE ID 0x177c558
(00.001223) Found id pipe:[24626520] (fd 2) in inherit fd list
(00.001228) Collected pipe entry ID 0xc PIPE ID 0x177c559
(00.001234) Found id pipe:[24626521] (fd 4) in inherit fd list
(00.001239) Collected pipe entry ID 0xe PIPE ID 0x177c558
(00.001245) Found id pipe:[24626520] (fd 10) in inherit fd list
(00.001262) unix: `- Got id 0x11 ino 24631648 type SOCK_STREAM state TCP_ESTABLISHED peer 24631647 (name - dir -)
(00.001267) unix: `- Got id 0xd ino 24631647 type SOCK_STREAM state TCP_ESTABLISHED peer 24631648 (name - dir -)
(00.001272) unix: `- Got id 0x13 ino 24631650 type SOCK_STREAM state TCP_ESTABLISHED peer 24631649 (name - dir -)
(00.001276) unix: `- Got id 0x12 ino 24631649 type SOCK_STREAM state TCP_ESTABLISHED peer 24631650 (name - dir -)
(00.001281) unix: `- Got id 0x15 ino 24631652 type SOCK_STREAM state TCP_ESTABLISHED peer 24631651 (name - dir -)
(00.001285) unix: `- Got id 0x14 ino 24631651 type SOCK_STREAM state TCP_ESTABLISHED peer 24631652 (name - dir -)
(00.001289) unix: `- Got id 0x17 ino 24631654 type SOCK_STREAM state TCP_ESTABLISHED peer 24631653 (name - dir -)
(00.001295) unix: `- Got id 0x16 ino 24631653 type SOCK_STREAM state TCP_ESTABLISHED peer 24631654 (name - dir -)
(00.001299) unix: `- Got id 0x19 ino 24631656 type SOCK_STREAM state TCP_ESTABLISHED peer 24631655 (name - dir -)
(00.001310) unix: `- Got id 0x18 ino 24631655 type SOCK_STREAM state TCP_ESTABLISHED peer 24631656 (name - dir -)
(00.001318) unix: `- Got id 0x1b ino 24631658 type SOCK_STREAM state TCP_ESTABLISHED peer 24631657 (name - dir -)
(00.001323) unix: `- Got id 0x1a ino 24631657 type SOCK_STREAM state TCP_ESTABLISHED peer 24631658 (name - dir -)
(00.001327) unix: `- Got id 0x1d ino 24624068 type SOCK_STREAM state TCP_ESTABLISHED peer 24624067 (name - dir -)
(00.001333) unix: `- Got id 0x1c ino 24624067 type SOCK_STREAM state TCP_ESTABLISHED peer 24624068 (name - dir -)
(00.001338) unix: `- Got id 0x1f ino 24624070 type SOCK_STREAM state TCP_ESTABLISHED peer 24624069 (name - dir -)
(00.001342) unix: `- Got id 0x1e ino 24624069 type SOCK_STREAM state TCP_ESTABLISHED peer 24624070 (name - dir -)
(00.001346) unix: `- Got id 0x21 ino 24624072 type SOCK_STREAM state TCP_ESTABLISHED peer 24624071 (name - dir -)
(00.001361) unix: `- Got id 0x20 ino 24624071 type SOCK_STREAM state TCP_ESTABLISHED peer 24624072 (name - dir -)
(00.001366) unix: `- Got id 0x23 ino 24624074 type SOCK_STREAM state TCP_ESTABLISHED peer 24624073 (name - dir -)
(00.001372) unix: `- Got id 0x22 ino 24624073 type SOCK_STREAM state TCP_ESTABLISHED peer 24624074 (name - dir -)
(00.001377) unix: `- Got id 0x25 ino 24624076 type SOCK_STREAM state TCP_ESTABLISHED peer 24624075 (name - dir -)
(00.001381) unix: `- Got id 0x24 ino 24624075 type SOCK_STREAM state TCP_ESTABLISHED peer 24624076 (name - dir -)
(00.001385) unix: `- Got id 0x27 ino 24624078 type SOCK_STREAM state TCP_ESTABLISHED peer 24624077 (name - dir -)
(00.001389) unix: `- Got id 0x26 ino 24624077 type SOCK_STREAM state TCP_ESTABLISHED peer 24624078 (name - dir -)
(00.001394) unix: `- Got id 0x29 ino 24624080 type SOCK_STREAM state TCP_ESTABLISHED peer 24624079 (name - dir -)
(00.001398) unix: `- Got id 0x28 ino 24624079 type SOCK_STREAM state TCP_ESTABLISHED peer 24624080 (name - dir -)
(00.001402) unix: `- Got id 0x2b ino 24624082 type SOCK_STREAM state TCP_ESTABLISHED peer 24624081 (name - dir -)
(00.001406) unix: `- Got id 0x2a ino 24624081 type SOCK_STREAM state TCP_ESTABLISHED peer 24624082 (name - dir -)
(00.001412) unix: `- Got id 0x2d ino 24624084 type SOCK_STREAM state TCP_ESTABLISHED peer 24624083 (name - dir -)
(00.001416) unix: `- Got id 0x2c ino 24624083 type SOCK_STREAM state TCP_ESTABLISHED peer 24624084 (name - dir -)
(00.001421) unix: `- Got id 0x2f ino 24635686 type SOCK_STREAM state TCP_ESTABLISHED peer 24635685 (name - dir -)
(00.001425) unix: `- Got id 0x2e ino 24635685 type SOCK_STREAM state TCP_ESTABLISHED peer 24635686 (name - dir -)
(00.001431) unix: `- Got id 0x31 ino 24635688 type SOCK_STREAM state TCP_ESTABLISHED peer 24635687 (name - dir -)
(00.001435) unix: `- Got id 0x30 ino 24635687 type SOCK_STREAM state TCP_ESTABLISHED peer 24635688 (name - dir -)
(00.001442) unix: `- Got id 0x33 ino 24635690 type SOCK_STREAM state TCP_ESTABLISHED peer 24635689 (name - dir -)
(00.001447) unix: `- Got id 0x32 ino 24635689 type SOCK_STREAM state TCP_ESTABLISHED peer 24635690 (name - dir -)
(00.001451) unix: `- Got id 0x35 ino 24635692 type SOCK_STREAM state TCP_ESTABLISHED peer 24635691 (name - dir -)
(00.001455) unix: `- Got id 0x34 ino 24635691 type SOCK_STREAM state TCP_ESTABLISHED peer 24635692 (name - dir -)
(00.001461) unix: `- Got id 0x37 ino 24635694 type SOCK_STREAM state TCP_ESTABLISHED peer 24635693 (name - dir -)
(00.001466) unix: `- Got id 0x36 ino 24635693 type SOCK_STREAM state TCP_ESTABLISHED peer 24635694 (name - dir -)
(00.001470) unix: `- Got id 0x39 ino 24635696 type SOCK_STREAM state TCP_ESTABLISHED peer 24635695 (name - dir -)
(00.001474) unix: `- Got id 0x38 ino 24635695 type SOCK_STREAM state TCP_ESTABLISHED peer 24635696 (name - dir -)
(00.001479) unix: `- Got id 0x3b ino 24632437 type SOCK_STREAM state TCP_ESTABLISHED peer 24632436 (name - dir -)
(00.001483) unix: `- Got id 0x3a ino 24632436 type SOCK_STREAM state TCP_ESTABLISHED peer 24632437 (name - dir -)
(00.001493) unix: `- Got id 0x3d ino 24632439 type SOCK_STREAM state TCP_ESTABLISHED peer 24632438 (name - dir -)
(00.001499) unix: `- Got id 0x3c ino 24632438 type SOCK_STREAM state TCP_ESTABLISHED peer 24632439 (name - dir -)
(00.001504) unix: `- Got id 0x3f ino 24632441 type SOCK_STREAM state TCP_ESTABLISHED peer 24632440 (name - dir -)
(00.001508) unix: `- Got id 0x3e ino 24632440 type SOCK_STREAM state TCP_ESTABLISHED peer 24632441 (name - dir -)
(00.001512) Collected [.] ID 0x40
(00.001516) Collected [.] ID 0x41
(00.001522) epoll: Collected eventpoll: id 0x000042 flags 0x02
(00.001528) eventfd: Collected : id 0x000043 flags 0x02 counter 0000000000000000
(00.001532) eventfd: Collected : id 0x000044 flags 0x802 counter 0000000000000000
(00.001536) Collected [.] ID 0x45
(00.001540) Collected [.] ID 0x46
(00.001545) epoll: Collected eventpoll: id 0x000047 flags 0x02
(00.001549) eventfd: Collected : id 0x000048 flags 0x02 counter 0000000000000000
(00.001553) eventfd: Collected : id 0x000049 flags 0x802 counter 0000000000000000
(00.001558) Collected [.] ID 0x4a
(00.001563) Collected [.] ID 0x4b
(00.001568) epoll: Collected eventpoll: id 0x00004c flags 0x02
(00.001572) eventfd: Collected : id 0x00004d flags 0x02 counter 0000000000000000
(00.001576) eventfd: Collected : id 0x00004e flags 0x802 counter 0000000000000000
(00.001579) Collected [.] ID 0x4f
(00.001594) Collected [.] ID 0x50
(00.001599) epoll: Collected eventpoll: id 0x000051 flags 0x02
(00.001602) eventfd: Collected : id 0x000052 flags 0x02 counter 0000000000000000
(00.001608) eventfd: Collected : id 0x000053 flags 0x802 counter 0000000000000000
(00.001612) Collected [.] ID 0x54
(00.001616) Collected [.] ID 0x55
(00.001620) epoll: Collected eventpoll: id 0x000056 flags 0x02
(00.001624) eventfd: Collected : id 0x000057 flags 0x02 counter 0000000000000000
(00.001628) eventfd: Collected : id 0x000058 flags 0x802 counter 0000000000000000
(00.001632) Collected [.] ID 0x59
(00.001636) Collected [.] ID 0x5a
(00.001642) epoll: Collected eventpoll: id 0x00005b flags 0x02
(00.001646) eventfd: Collected : id 0x00005c flags 0x02 counter 0000000000000000
(00.001650) eventfd: Collected : id 0x00005d flags 0x802 counter 0000000000000000
(00.001654) Collected [.] ID 0x5e
(00.001657) Collected [.] ID 0x5f
(00.001662) epoll: Collected eventpoll: id 0x000060 flags 0x02
(00.001666) eventfd: Collected : id 0x000061 flags 0x02 counter 0000000000000000
(00.001669) eventfd: Collected : id 0x000062 flags 0x802 counter 0000000000000000
(00.001679) Collected [.] ID 0x63
(00.001683) Collected [.] ID 0x64
(00.001688) epoll: Collected eventpoll: id 0x000065 flags 0x02
(00.001692) eventfd: Collected : id 0x000066 flags 0x02 counter 0000000000000000
(00.001696) eventfd: Collected : id 0x000067 flags 0x802 counter 0000000000000000
(00.001700) Collected [.] ID 0x68
(00.001703) Collected [.] ID 0x69
(00.001710) epoll: Collected eventpoll: id 0x00006a flags 0x02
(00.001714) eventfd: Collected : id 0x00006b flags 0x02 counter 0000000000000000
(00.001718) eventfd: Collected : id 0x00006c flags 0x802 counter 0000000000000000
(00.001721) Collected [.] ID 0x6d
(00.001725) Collected [.] ID 0x6e
(00.001730) epoll: Collected eventpoll: id 0x00006f flags 0x02
(00.001733) eventfd: Collected : id 0x000070 flags 0x02 counter 0000000000000000
(00.001737) eventfd: Collected : id 0x000071 flags 0x802 counter 0000000000000000
(00.001742) Collected [.] ID 0x72
(00.001748) Collected [.] ID 0x73
(00.001752) epoll: Collected eventpoll: id 0x000074 flags 0x02
(00.001756) eventfd: Collected : id 0x000075 flags 0x02 counter 0000000000000000
(00.001760) eventfd: Collected : id 0x000076 flags 0x802 counter 0000000000000000
(00.001764) Collected [.] ID 0x77
(00.001768) Collected [.] ID 0x78
(00.001772) epoll: Collected eventpoll: id 0x000079 flags 0x02
(00.001778) eventfd: Collected : id 0x00007a flags 0x02 counter 0000000000000000
(00.001782) eventfd: Collected : id 0x00007b flags 0x802 counter 0000000000000000
(00.001785) Collected [.] ID 0x7c
(00.001789) Collected [.] ID 0x7d
(00.001794) epoll: Collected eventpoll: id 0x00007e flags 0x02
(00.001801) eventfd: Collected : id 0x00007f flags 0x02 counter 0000000000000000
(00.001807) eventfd: Collected : id 0x000080 flags 0x802 counter 0000000000000000
(00.001811) Collected [.] ID 0x81
(00.001816) Collected [.] ID 0x82
(00.001821) epoll: Collected eventpoll: id 0x000083 flags 0x02
(00.001825) eventfd: Collected : id 0x000084 flags 0x02 counter 0000000000000000
(00.001829) eventfd: Collected : id 0x000085 flags 0x802 counter 0000000000000000
(00.001833) Collected [.] ID 0x86
(00.001836) Collected [.] ID 0x87
(00.001841) epoll: Collected eventpoll: id 0x000088 flags 0x02
(00.001845) eventfd: Collected : id 0x000089 flags 0x02 counter 0000000000000000
(00.001850) eventfd: Collected : id 0x00008a flags 0x802 counter 0000000000000000
(00.001854) Collected [.] ID 0x8b
(00.001858) Collected [.] ID 0x8c
(00.001862) epoll: Collected eventpoll: id 0x00008d flags 0x02
(00.001866) eventfd: Collected : id 0x00008e flags 0x02 counter 0000000000000000
(00.001870) eventfd: Collected : id 0x00008f flags 0x802 counter 0000000000000000
(00.001874) Collected [.] ID 0x90
(00.001878) Collected [.] ID 0x91
(00.001884) epoll: Collected eventpoll: id 0x000092 flags 0x02
(00.001888) eventfd: Collected : id 0x000093 flags 0x02 counter 0000000000000000
(00.001892) eventfd: Collected : id 0x000094 flags 0x802 counter 0000000000000000
(00.001895) Collected [.] ID 0x95
(00.001899) Collected [.] ID 0x96
(00.001904) epoll: Collected eventpoll: id 0x000097 flags 0x02
(00.001907) eventfd: Collected : id 0x000098 flags 0x02 counter 0000000000000000
(00.001911) eventfd: Collected : id 0x000099 flags 0x802 counter 0000000000000000
(00.001917) Collected [.] ID 0x9a
(00.001921) Collected [.] ID 0x9b
(00.001925) epoll: Collected eventpoll: id 0x00009c flags 0x02
(00.001929) eventfd: Collected : id 0x00009d flags 0x02 counter 0000000000000000
(00.001933) eventfd: Collected : id 0x00009e flags 0x802 counter 0000000000000000
(00.001937) Collected [.] ID 0x9f
(00.001941) Collected [.] ID 0xa0
(00.001946) epoll: Collected eventpoll: id 0x0000a1 flags 0x02
(00.001949) eventfd: Collected : id 0x0000a2 flags 0x02 counter 0000000000000000
(00.001952) eventfd: Collected : id 0x0000a3 flags 0x802 counter 0000000000000000
(00.001955) Collected [.] ID 0xa4
(00.001958) Collected [.] ID 0xa5
(00.001962) epoll: Collected eventpoll: id 0x0000a6 flags 0x02
(00.001966) eventfd: Collected : id 0x0000a7 flags 0x02 counter 0000000000000000
(00.001969) eventfd: Collected : id 0x0000a8 flags 0x802 counter 0000000000000000
(00.001974) Collected [.] ID 0xa9
(00.001977) Collected [.] ID 0xaa
(00.001981) epoll: Collected eventpoll: id 0x0000ab flags 0x02
(00.001984) eventfd: Collected : id 0x0000ac flags 0x02 counter 0000000000000000
(00.001987) eventfd: Collected : id 0x0000ad flags 0x802 counter 0000000000000000
(00.001991) Collected [.] ID 0xae
(00.001994) Collected [.] ID 0xaf
(00.001997) epoll: Collected eventpoll: id 0x0000b0 flags 0x02
(00.002002) eventfd: Collected : id 0x0000b1 flags 0x02 counter 0000000000000000
(00.002005) eventfd: Collected : id 0x0000b2 flags 0x802 counter 0000000000000000
(00.002008) Collected [.] ID 0xb3
(00.002011) Collected [.] ID 0xb4
(00.002015) epoll: Collected eventpoll: id 0x0000b5 flags 0x02
(00.002018) eventfd: Collected : id 0x0000b6 flags 0x02 counter 0000000000000000
(00.002021) eventfd: Collected : id 0x0000b7 flags 0x802 counter 0000000000000000
(00.002024) Collected [.] ID 0xb8
(00.002031) Collected [.] ID 0xb9
(00.002036) `- ... done
(00.002038) Collecting 46/69 (flags 0)
(00.002043) No remap-fpath.img image
(00.002047) `- ... done
(00.002051) No apparmor.img image
(00.002080) cg: rewriting system.slice/kubelet-kubepods-burstable-pod6b98d41c_2dab_4c0f_abb3_96f4edfa7ddb.slice:cri-containerd:e218eeab3df91212372a4fa442b2fe761475a4873b499a16f43daf284469eee6 to /system.slice/kubelet-kubepods-burstable-pod6b98d41c_2dab_4c0f_abb3_96f4edfa7ddb.slice:cri-containerd:e218eeab3df91212372a4fa442b2fe761475a4873b499a16f43daf284469eee6
(00.002098) cg: Preparing cgroups yard (cgroups restore mode 0x4)
(00.002175) cg: Opening .criu.cgyard.idJ9pH as cg yard
(00.002186) cg: \tMaking controller dir .criu.cgyard.idJ9pH/unified (), type cgroup2
(00.002218) cg: Determined cgroup dir unified//system.slice/kubelet-kubepods-burstable-pod6b98d41c_2dab_4c0f_abb3_96f4edfa7ddb.slice:cri-containerd:e218eeab3df91212372a4fa442b2fe761475a4873b499a16f43daf284469eee6 already exist
(00.002221) cg: Skip restoring properties on cgroup dir unified//system.slice/kubelet-kubepods-burstable-pod6b98d41c_2dab_4c0f_abb3_96f4edfa7ddb.slice:cri-containerd:e218eeab3df91212372a4fa442b2fe761475a4873b499a16f43daf284469eee6
(00.002390) Running pre-restore scripts
(00.002398) \tRPC
(00.002455) cg: cgroud: Daemon started
(00.002755) net: Saved netns fd for links restore
(00.002783) uns: Daemon started
(00.002818) mnt: Reading mountpoint images (id 13 pid 1)
(00.002844) mnt: \t\tWill mount 2626 from /
(00.002849) mnt: \t\tWill mount 2626 @ /tmp/.criu.mntns.4h8rle/mnt-0000002626 /sys/devices/virtual/powercap
(00.002853) mnt: \tRead 2626 mp @ /sys/devices/virtual/powercap
(00.002860) mnt: \t\tWill mount 2625 from /
(00.002864) mnt: \t\tWill mount 2625 @ /tmp/.criu.mntns.4h8rle/mnt-0000002625 /sys/firmware
(00.002867) mnt: \tRead 2625 mp @ /sys/firmware
(00.002872) mnt: \t\tWill mount 2624 from /
(00.002875) mnt: \t\tWill mount 2624 @ /tmp/.criu.mntns.4h8rle/mnt-0000002624 /proc/scsi
(00.002879) mnt: \tRead 2624 mp @ /proc/scsi
(00.002884) mnt: \t\tWill mount 2623 from /dev/null (E)
(00.002888) mnt: \t\tWill mount 2623 @ /tmp/.criu.mntns.4h8rle/mnt-0000002623 /proc/timer_list
(00.002891) mnt: \tRead 2623 mp @ /proc/timer_list
(00.002898) mnt: \t\tWill mount 2622 from /dev/null (E)
(00.002902) mnt: \t\tWill mount 2622 @ /tmp/.criu.mntns.4h8rle/mnt-0000002622 /proc/latency_stats
(00.002906) mnt: \tRead 2622 mp @ /proc/latency_stats
(00.002910) mnt: \t\tWill mount 2616 from /dev/null (E)
(00.002913) mnt: \t\tWill mount 2616 @ /tmp/.criu.mntns.4h8rle/mnt-0000002616 /proc/keys
(00.002917) mnt: \tRead 2616 mp @ /proc/keys
(00.002921) mnt: \t\tWill mount 2614 from /dev/null (E)
(00.002924) mnt: \t\tWill mount 2614 @ /tmp/.criu.mntns.4h8rle/mnt-0000002614 /proc/kcore
(00.002928) mnt: \tRead 2614 mp @ /proc/kcore
(00.002937) mnt: \t\tWill mount 2543 from /
(00.002941) mnt: \t\tWill mount 2543 @ /tmp/.criu.mntns.4h8rle/mnt-0000002543 /proc/acpi
(00.002944) mnt: \tRead 2543 mp @ /proc/acpi
(00.002948) mnt: \t\tWill mount 2541 from /
(00.002952) mnt: \t\tWill mount 2541 @ /tmp/.criu.mntns.4h8rle/mnt-0000002541 /proc/asound
(00.002955) mnt: \tRead 2541 mp @ /proc/asound
(00.002962) mnt: \t\tWill mount 2540 from /sysrq-trigger
(00.002966) mnt: \t\tWill mount 2540 @ /tmp/.criu.mntns.4h8rle/mnt-0000002540 /proc/sysrq-trigger
(00.002969) mnt: \tRead 2540 mp @ /proc/sysrq-trigger
(00.002973) mnt: \t\tWill mount 2539 from /sys
(00.002977) mnt: \t\tWill mount 2539 @ /tmp/.criu.mntns.4h8rle/mnt-0000002539 /proc/sys
(00.002980) mnt: \tRead 2539 mp @ /proc/sys
(00.002986) mnt: \t\tWill mount 2525 from /irq
(00.002990) mnt: \t\tWill mount 2525 @ /tmp/.criu.mntns.4h8rle/mnt-0000002525 /proc/irq
(00.002993) mnt: \tRead 2525 mp @ /proc/irq
(00.003004) mnt: \t\tWill mount 2513 from /fs
(00.003008) mnt: \t\tWill mount 2513 @ /tmp/.criu.mntns.4h8rle/mnt-0000002513 /proc/fs
(00.003010) mnt: \tRead 2513 mp @ /proc/fs
(00.003016) mnt: \t\tWill mount 2512 from /bus
(00.003019) mnt: \t\tWill mount 2512 @ /tmp/.criu.mntns.4h8rle/mnt-0000002512 /proc/bus
(00.003022) mnt: \tRead 2512 mp @ /proc/bus
(00.003025) mnt: \t\tWill mount 2829 from /dev/urandom (E)
(00.003028) mnt: \t\tWill mount 2829 @ /tmp/.criu.mntns.4h8rle/mnt-0000002829 /dev/urandom
(00.003031) mnt: \tRead 2829 mp @ /dev/urandom
(00.003034) mnt: \t\tWill mount 2828 from /dev/zero (E)
(00.003037) mnt: \t\tWill mount 2828 @ /tmp/.criu.mntns.4h8rle/mnt-0000002828 /dev/zero
(00.003039) mnt: \tRead 2828 mp @ /dev/zero
(00.003045) mnt: \t\tWill mount 2827 from /dev/tty (E)
(00.003048) mnt: \t\tWill mount 2827 @ /tmp/.criu.mntns.4h8rle/mnt-0000002827 /dev/tty
(00.003051) mnt: \tRead 2827 mp @ /dev/tty
(00.003060) mnt: \t\tWill mount 2826 from /dev/full (E)
(00.003063) mnt: \t\tWill mount 2826 @ /tmp/.criu.mntns.4h8rle/mnt-0000002826 /dev/full
(00.003070) mnt: \tRead 2826 mp @ /dev/full
(00.003077) mnt: \t\tWill mount 2825 from /dev/random (E)
(00.003080) mnt: \t\tWill mount 2825 @ /tmp/.criu.mntns.4h8rle/mnt-0000002825 /dev/random
(00.003083) mnt: \tRead 2825 mp @ /dev/random
(00.003086) mnt: \t\tWill mount 2824 from /dev/null (E)
(00.003089) mnt: \t\tWill mount 2824 @ /tmp/.criu.mntns.4h8rle/mnt-0000002824 /dev/null
(00.003091) mnt: \tRead 2824 mp @ /dev/null
(00.003097) mnt: \t\tWill mount 2823 from /var/lib/kubelet/pods/6b98d41c-2dab-4c0f-abb3-96f4edfa7ddb/volumes/kubernetes.io~projected/kube-api-access-gmnsm (E)
(00.003100) mnt: \t\tWill mount 2823 @ /tmp/.criu.mntns.4h8rle/mnt-0000002823 /run/secrets/kubernetes.io/serviceaccount
(00.003103) mnt: \tRead 2823 mp @ /run/secrets/kubernetes.io/serviceaccount
(00.003108) mnt: \t\tWill mount 2822 from /run/containerd/io.containerd.grpc.v1.cri/sandboxes/318a4ad33762e6abbf338abb5cd074ade5ff4c64ad27fc35c1ab8785fd163ecb/shm (E)
(00.003111) mnt: \t\tWill mount 2822 @ /tmp/.criu.mntns.4h8rle/mnt-0000002822 /dev/shm
(00.003114) mnt: \tRead 2822 mp @ /dev/shm
(00.003117) mnt: \t\tWill mount 2821 from /var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/318a4ad33762e6abbf338abb5cd074ade5ff4c64ad27fc35c1ab8785fd163ecb/resolv.conf (E)
(00.003120) mnt: \t\tWill mount 2821 @ /tmp/.criu.mntns.4h8rle/mnt-0000002821 /etc/resolv.conf
(00.003123) mnt: \tRead 2821 mp @ /etc/resolv.conf
(00.003126) mnt: \t\tWill mount 2805 from /var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/318a4ad33762e6abbf338abb5cd074ade5ff4c64ad27fc35c1ab8785fd163ecb/hostname (E)
(00.003129) mnt: \t\tWill mount 2805 @ /tmp/.criu.mntns.4h8rle/mnt-0000002805 /etc/hostname
(00.003132) mnt: \tRead 2805 mp @ /etc/hostname
(00.003137) mnt: \t\tWill mount 2804 from /var/lib/kubelet/pods/6b98d41c-2dab-4c0f-abb3-96f4edfa7ddb/containers/nginx/40f0ee31 (E)
(00.003140) mnt: \t\tWill mount 2804 @ /tmp/.criu.mntns.4h8rle/mnt-0000002804 /dev/termination-log
(00.003143) mnt: \tRead 2804 mp @ /dev/termination-log
(00.003149) mnt: \t\tWill mount 2803 from /var/lib/kubelet/pods/6b98d41c-2dab-4c0f-abb3-96f4edfa7ddb/etc-hosts (E)
(00.003152) mnt: \t\tWill mount 2803 @ /tmp/.criu.mntns.4h8rle/mnt-0000002803 /etc/hosts
(00.003155) mnt: \tRead 2803 mp @ /etc/hosts
(00.003158) mnt: \t\tWill mount 2802 from /
(00.003161) mnt: \t\tWill mount 2802 @ /tmp/.criu.mntns.4h8rle/mnt-0000002802 /sys/fs/cgroup
(00.003164) mnt: \tRead 2802 mp @ /sys/fs/cgroup
(00.003167) mnt: \t\tWill mount 2801 from /
(00.003170) mnt: \t\tWill mount 2801 @ /tmp/.criu.mntns.4h8rle/mnt-0000002801 /sys
(00.003173) mnt: \tRead 2801 mp @ /sys
(00.003182) mnt: \t\tWill mount 2800 from /
(00.003185) mnt: \t\tWill mount 2800 @ /tmp/.criu.mntns.4h8rle/mnt-0000002800 /dev/mqueue
(00.003188) mnt: \tRead 2800 mp @ /dev/mqueue
(00.003191) mnt: \t\tWill mount 2799 from /
(00.003194) mnt: \t\tWill mount 2799 @ /tmp/.criu.mntns.4h8rle/mnt-0000002799 /dev/pts
(00.003197) mnt: \tRead 2799 mp @ /dev/pts
(00.003200) mnt: \t\tWill mount 2798 from /
(00.003203) mnt: \t\tWill mount 2798 @ /tmp/.criu.mntns.4h8rle/mnt-0000002798 /dev
(00.003205) mnt: \tRead 2798 mp @ /dev
(00.003210) mnt: \t\tWill mount 2797 from /
(00.003213) mnt: \t\tWill mount 2797 @ /tmp/.criu.mntns.4h8rle/mnt-0000002797 /proc
(00.003216) mnt: \tRead 2797 mp @ /proc
(00.003221) mnt: \t\tWill mount 2795 from /
(00.003224) mnt: \t\tWill mount 2795 @ /tmp/.criu.mntns.4h8rle/mnt-0000002795 /
(00.003227) mnt: \tRead 2795 mp @ /
(00.003231) mnt: Building mountpoints tree
(00.003234) mnt: \tBuilding plain mount tree
(00.003237) mnt: \t\tWorking on 2795->2511
(00.003240) mnt: \t\tWorking on 2797->2795
(00.003243) mnt: \t\tWorking on 2798->2795
(00.003245) mnt: \t\tWorking on 2799->2798
(00.003248) mnt: \t\tWorking on 2800->2798
(00.003251) mnt: \t\tWorking on 2801->2795
(00.003253) mnt: \t\tWorking on 2802->2801
(00.003256) mnt: \t\tWorking on 2803->2795
(00.003259) mnt: \t\tWorking on 2804->2798
(00.003261) mnt: \t\tWorking on 2805->2795
(00.003264) mnt: \t\tWorking on 2821->2795
(00.003267) mnt: \t\tWorking on 2822->2798
(00.003270) mnt: \t\tWorking on 2823->2795
(00.003272) mnt: \t\tWorking on 2824->2798
(00.003275) mnt: \t\tWorking on 2825->2798
(00.003281) mnt: \t\tWorking on 2826->2798
(00.003285) mnt: \t\tWorking on 2827->2798
(00.003288) mnt: \t\tWorking on 2828->2798
(00.003290) mnt: \t\tWorking on 2829->2798
(00.003293) mnt: \t\tWorking on 2512->2797
(00.003296) mnt: \t\tWorking on 2513->2797
(00.003299) mnt: \t\tWorking on 2525->2797
(00.003301) mnt: \t\tWorking on 2539->2797
(00.003304) mnt: \t\tWorking on 2540->2797
(00.003307) mnt: \t\tWorking on 2541->2797
(00.003309) mnt: \t\tWorking on 2543->2797
(00.003312) mnt: \t\tWorking on 2614->2797
(00.003315) mnt: \t\tWorking on 2616->2797
(00.003317) mnt: \t\tWorking on 2622->2797
(00.003320) mnt: \t\tWorking on 2623->2797
(00.003323) mnt: \t\tWorking on 2624->2797
(00.003326) mnt: \t\tWorking on 2625->2801
(00.003328) mnt: \t\tWorking on 2626->2801
(00.003331) mnt: \tResorting children of 2795 in mount order
(00.003334) mnt: \tResorting children of 2823 in mount order
(00.003337) mnt: \tResorting children of 2803 in mount order
(00.003340) mnt: \tResorting children of 2805 in mount order
(00.003342) mnt: \tResorting children of 2821 in mount order
(00.003345) mnt: \tResorting children of 2797 in mount order
(00.003348) mnt: \tResorting children of 2512 in mount order
(00.003351) mnt: \tResorting children of 2513 in mount order
(00.003354) mnt: \tResorting children of 2525 in mount order
(00.003356) mnt: \tResorting children of 2539 in mount order
(00.003359) mnt: \tResorting children of 2540 in mount order
(00.003362) mnt: \tResorting children of 2541 in mount order
(00.003364) mnt: \tResorting children of 2543 in mount order
(00.003367) mnt: \tResorting children of 2614 in mount order
(00.003370) mnt: \tResorting children of 2616 in mount order
(00.003373) mnt: \tResorting children of 2622 in mount order
(00.003375) mnt: \tResorting children of 2623 in mount order
(00.003378) mnt: \tResorting children of 2624 in mount order
(00.003381) mnt: \tResorting children of 2798 in mount order
(00.003384) mnt: \tResorting children of 2799 in mount order
(00.003387) mnt: \tResorting children of 2800 in mount order
(00.003389) mnt: \tResorting children of 2804 in mount order
(00.003392) mnt: \tResorting children of 2822 in mount order
(00.003395) mnt: \tResorting children of 2824 in mount order
(00.003397) mnt: \tResorting children of 2825 in mount order
(00.003400) mnt: \tResorting children of 2826 in mount order
(00.003403) mnt: \tResorting children of 2827 in mount order
(00.003405) mnt: \tResorting children of 2828 in mount order
(00.003408) mnt: \tResorting children of 2829 in mount order
(00.003411) mnt: \tResorting children of 2801 in mount order
(00.003414) mnt: \tResorting children of 2626 in mount order
(00.003416) mnt: \tResorting children of 2802 in mount order
(00.003419) mnt: \tResorting children of 2625 in mount order
(00.003422) mnt: Done:
(00.003424) mnt: [/](2795->2511)
(00.003427) mnt: [/run/secrets/kubernetes.io/serviceaccount](2823->2795)
(00.003430) mnt: <--
(00.003433) mnt: [/etc/hosts](2803->2795)
(00.003436) mnt: <--
(00.003438) mnt: [/etc/hostname](2805->2795)
(00.003441) mnt: <--
(00.003444) mnt: [/etc/resolv.conf](2821->2795)
(00.003446) mnt: <--
(00.003449) mnt: [/proc](2797->2795)
(00.003452) mnt: [/proc/bus](2512->2797)
(00.003455) mnt: <--
(00.003457) mnt: [/proc/fs](2513->2797)
(00.003460) mnt: <--
(00.003463) mnt: [/proc/irq](2525->2797)
(00.003466) mnt: <--
(00.003468) mnt: [/proc/sys](2539->2797)
(00.003471) mnt: <--
(00.003474) mnt: [/proc/sysrq-trigger](2540->2797)
(00.003476) mnt: <--
(00.003479) mnt: [/proc/asound](2541->2797)
(00.003482) mnt: <--
(00.003485) mnt: [/proc/acpi](2543->2797)
(00.003487) mnt: <--
(00.003490) mnt: [/proc/kcore](2614->2797)
(00.003493) mnt: <--
(00.003495) mnt: [/proc/keys](2616->2797)
(00.003498) mnt: <--
(00.003501) mnt: [/proc/latency_stats](2622->2797)
(00.003504) mnt: <--
(00.003506) mnt: [/proc/timer_list](2623->2797)
(00.003509) mnt: <--
(00.003512) mnt: [/proc/scsi](2624->2797)
(00.003515) mnt: <--
(00.003517) mnt: <--
(00.003520) mnt: [/dev](2798->2795)
(00.003523) mnt: [/dev/pts](2799->2798)
(00.003525) mnt: <--
(00.003528) mnt: [/dev/mqueue](2800->2798)
(00.003534) mnt: <--
(00.003538) mnt: [/dev/termination-log](2804->2798)
(00.003540) mnt: <--
(00.003543) mnt: [/dev/shm](2822->2798)
(00.003546) mnt: <--
(00.003548) mnt: [/dev/null](2824->2798)
(00.003551) mnt: <--
(00.003554) mnt: [/dev/random](2825->2798)
(00.003557) mnt: <--
(00.003559) mnt: [/dev/full](2826->2798)
(00.003562) mnt: <--
(00.003565) mnt: [/dev/tty](2827->2798)
(00.003567) mnt: <--
(00.003570) mnt: [/dev/zero](2828->2798)
(00.003573) mnt: <--
(00.003576) mnt: [/dev/urandom](2829->2798)
(00.003578) mnt: <--
(00.003581) mnt: <--
(00.003584) mnt: [/sys](2801->2795)
(00.003586) mnt: [/sys/devices/virtual/powercap](2626->2801)
(00.003589) mnt: <--
(00.003592) mnt: [/sys/fs/cgroup](2802->2801)
(00.003595) mnt: <--
(00.003597) mnt: [/sys/firmware](2625->2801)
(00.003600) mnt: <--
(00.003603) mnt: <--
(00.003606) mnt: <--
(00.003609) mnt: \tThe mount 2512 is bind for 2797 (@/proc/bus -> @/proc)
(00.003612) mnt: \tThe mount 2513 is bind for 2797 (@/proc/fs -> @/proc)
(00.003614) mnt: \tThe mount 2525 is bind for 2797 (@/proc/irq -> @/proc)
(00.003617) mnt: \tThe mount 2539 is bind for 2797 (@/proc/sys -> @/proc)
(00.003620) mnt: \tThe mount 2540 is bind for 2797 (@/proc/sysrq-trigger -> @/proc)
(00.003623) mnt: \tThe mount 2804 is bind for 2803 (@/dev/termination-log -> @/etc/hosts)
(00.003626) mnt: \tThe mount 2805 is bind for 2803 (@/etc/hostname -> @/etc/hosts)
(00.003629) mnt: \tThe mount 2821 is bind for 2803 (@/etc/resolv.conf -> @/etc/hosts)
(00.003632) mnt: \tThe mount 2825 is bind for 2824 (@/dev/random -> @/dev/null)
(00.003634) mnt: \tThe mount 2826 is bind for 2824 (@/dev/full -> @/dev/null)
(00.003637) mnt: \tThe mount 2827 is bind for 2824 (@/dev/tty -> @/dev/null)
(00.003640) mnt: \tThe mount 2828 is bind for 2824 (@/dev/zero -> @/dev/null)
(00.003643) mnt: \tThe mount 2829 is bind for 2824 (@/dev/urandom -> @/dev/null)
(00.003646) mnt: \tThe mount 2614 is bind for 2824 (@/proc/kcore -> @/dev/null)
(00.003648) mnt: \tThe mount 2616 is bind for 2824 (@/proc/keys -> @/dev/null)
(00.003651) mnt: \tThe mount 2622 is bind for 2824 (@/proc/latency_stats -> @/dev/null)
(00.003654) mnt: \tThe mount 2623 is bind for 2824 (@/proc/timer_list -> @/dev/null)
(00.003657) mnt: Start with 2795:/
(00.003662) mnt-v2: Inspecting sharing on 2824 shared_id 0 master_id 1214 (@/dev/null)
(00.003667) mnt-v2: Inspecting sharing on 2825 shared_id 0 master_id 1214 (@/dev/random)
(00.003670) mnt-v2: Inspecting sharing on 2826 shared_id 0 master_id 1214 (@/dev/full)
(00.003673) mnt-v2: Inspecting sharing on 2827 shared_id 0 master_id 1214 (@/dev/tty)
(00.003676) mnt-v2: Inspecting sharing on 2828 shared_id 0 master_id 1214 (@/dev/zero)
(00.003679) mnt-v2: Inspecting sharing on 2829 shared_id 0 master_id 1214 (@/dev/urandom)
(00.003681) mnt-v2: Inspecting sharing on 2614 shared_id 0 master_id 1214 (@/proc/kcore)
(00.003684) mnt-v2: Inspecting sharing on 2616 shared_id 0 master_id 1214 (@/proc/keys)
(00.003687) mnt-v2: Inspecting sharing on 2622 shared_id 0 master_id 1214 (@/proc/latency_stats)
(00.003690) mnt-v2: Inspecting sharing on 2623 shared_id 0 master_id 1214 (@/proc/timer_list)
(00.003693) mnt-v2: Detected external slavery for shared group (0, 1214) with source /dev/null
(00.003696) mnt: Mountpoint 2795 (@/) moved to the root yard
(00.003712) No pidns-9.img image
(00.003745) Warn (criu/cr-restore.c:1043): Set CLONE_PARENT | CLONE_NEWPID but it might cause restore problem,because not all kernels support such clone flags combinations!
(00.003748) Forking task with 1 pid (flags 0x7c028000)
(00.003751) Creating process using clone3()
(00.004040) PID: real 7243 virt 1
(00.004129) Wait until namespaces are created
(00.004125) 1: Found id extRootNetNS (fd 18) in inherit fd list
(00.004194) 1: Error (criu/namespaces.c:258): Can't setns 18/net: Operation not permitted
(00.004208) 1: Error (criu/cr-restore.c:1559): Can't unshare net-namespace: Operation not permitted
(00.004700) uns: calling exit_usernsd (-1, 1)
(00.004733) uns: daemon calls 0x564b8458c110 (7239, -1, 1)
(00.004748) uns: `- daemon exits w/ 0
(00.005220) uns: daemon stopped
(00.005227) Error (criu/cr-restore.c:2320): Restoring FAILED.
(00.005666) Error (criu/cgroup.c:1998): cg: cgroupd: recv req error: No such file or directory