search

google / gvisor

Application Kernel for Containers
https://gvisor.dev
Apache License 2.0
15.53k stars 1.28k forks source link

Cannot run pod using gvisor as runtime #8578

Closed frezbo closed 1 year ago

frezbo commented 1 year ago

Description

Pod creation fails with:

W0222 17:53:26.864233    2953 util.go:64] FATAL ERROR: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device
W0222 17:53:26.870159    2953 main.go:261] Failure to execute command, err: 1

Steps to reproduce

No response

runsc version

Using gvisor at 20231214.0 build with Go1.20.1, built from Go branch at commit: 27f3a24a8b724a2661beb393c7a0c479ee776aa0

docker version (if using docker)

No response

uname

6.1.12

containerd

1.6.18

kubectl (if using Kubernetes)

1.26.0

repo state (if built from source)

No response

runsc debug logs (if available)

❯ talosctl -n 10.5.0.3 read /var/log/runsc.log
I0222 17:53:26.829420    2953 main.go:218] ***************************
I0222 17:53:26.833233    2953 main.go:219] Args: [runsc --root=/run/containerd/runsc/k8s.io --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/log.json --log-format=json --debug=true --debug-log=/var/log/runsc.log --ignore-cgroups=true --strace=true create --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b --pid-file /run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/init.pid --user-log /var/log/pods/default_nginx-gvisor_d6e810b2-23b0-4e89-9f2a-a33ed4d89c2d/gvisor.log 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b]
I0222 17:53:26.833281    2953 main.go:220] Version VERSION_MISSING
I0222 17:53:26.833295    2953 main.go:221] GOOS: linux
I0222 17:53:26.833309    2953 main.go:222] GOARCH: amd64
I0222 17:53:26.833324    2953 main.go:223] PID: 2953
I0222 17:53:26.833340    2953 main.go:224] UID: 0, GID: 0
I0222 17:53:26.833354    2953 main.go:225] Configuration:
I0222 17:53:26.833368    2953 main.go:226]      RootDir: /run/containerd/runsc/k8s.io
I0222 17:53:26.833382    2953 main.go:227]      Platform: ptrace
I0222 17:53:26.833396    2953 main.go:228]      FileAccess: exclusive
I0222 17:53:26.833412    2953 main.go:230]      Overlay: Root=false, SubMounts=false, Medium=""
I0222 17:53:26.833427    2953 main.go:231]      Network: sandbox, logging: false
I0222 17:53:26.833442    2953 main.go:232]      Strace: true, max size: 1024, syscalls: 
I0222 17:53:26.833456    2953 main.go:233]      IOURING: false
I0222 17:53:26.833470    2953 main.go:234]      Debug: true
I0222 17:53:26.833486    2953 main.go:235]      Systemd: false
I0222 17:53:26.833500    2953 main.go:236] ***************************
D0222 17:53:26.857395    2953 specutils.go:77] Spec:
{
  "ociVersion": "1.0.2-dev",
  "process": {
    "user": {
      "uid": 65535,
      "gid": 65535,
      "additionalGids": [
        65535
      ]
    },
    "args": [
      "/pause"
    ],
    "env": [
      "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
    ],
    "cwd": "/",
    "noNewPrivileges": true,
    "oomScoreAdj": -998
  },
  "root": {
    "path": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/rootfs",
    "readonly": true
  },
  "hostname": "nginx-gvisor",
  "mounts": [
    {
      "destination": "/proc",
      "type": "proc",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/proc",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/dev",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/tmpfs",
      "options": [
        "nosuid",
        "strictatime",
        "mode=755",
        "size=65536k"
      ]
    },
    {
      "destination": "/dev/pts",
      "type": "devpts",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/devpts",
      "options": [
        "nosuid",
        "noexec",
        "newinstance",
        "ptmxmode=0666",
        "mode=0620",
        "gid=5"
      ]
    },
    {
      "destination": "/dev/mqueue",
      "type": "mqueue",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/mqueue",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/sys",
      "type": "sysfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/sysfs",
      "options": [
        "nosuid",
        "noexec",
        "nodev",
        "ro"
      ]
    },
    {
      "destination": "/dev/shm",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/shm",
      "options": [
        "ro"
      ]
    },
    {
      "destination": "/etc/resolv.conf",
      "type": "bind",
      "source": "/var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/resolv.conf",
      "options": [
        "rbind",
        "ro"
      ]
    }
  ],
  "annotations": {
    "dev.gvisor.spec.cgroup-parent": "/kubepods/besteffort/podd6e810b2-23b0-4e89-9f2a-a33ed4d89c2d",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.options": "rw",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.share": "pod",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/shm",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.type": "tmpfs",
    "io.kubernetes.cri.container-type": "sandbox",
    "io.kubernetes.cri.sandbox-cpu-period": "100000",
    "io.kubernetes.cri.sandbox-cpu-quota": "0",
    "io.kubernetes.cri.sandbox-cpu-shares": "2",
    "io.kubernetes.cri.sandbox-id": "5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b",
    "io.kubernetes.cri.sandbox-log-directory": "/var/log/pods/default_nginx-gvisor_d6e810b2-23b0-4e89-9f2a-a33ed4d89c2d",
    "io.kubernetes.cri.sandbox-memory": "0",
    "io.kubernetes.cri.sandbox-name": "nginx-gvisor",
    "io.kubernetes.cri.sandbox-namespace": "default",
    "io.kubernetes.cri.sandbox-uid": "d6e810b2-23b0-4e89-9f2a-a33ed4d89c2d"
  },
  "linux": {
    "resources": {
      "cpu": {
        "shares": 2
      }
    },
    "cgroupsPath": "/kubepods/besteffort/podd6e810b2-23b0-4e89-9f2a-a33ed4d89c2d/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b",
    "namespaces": [
      {
        "type": "pid"
      },
      {
        "type": "ipc"
      },
      {
        "type": "uts"
      },
      {
        "type": "mount"
      },
      {
        "type": "network",
        "path": "/var/run/netns/cni-b6ad74c2-e9d7-cb07-590b-e17613e8529c"
      }
    ]
  }
}
D0222 17:53:26.858933    2953 container.go:185] Create container, cid: 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b, rootDir: "/run/containerd/runsc/k8s.io"
D0222 17:53:26.859076    2953 container.go:244] Creating new sandbox for container, cid: 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b
D0222 17:53:26.859268    2953 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/log.json"
D0222 17:53:26.859286    2953 donation.go:31] Donating FD 4: "/var/log/runsc.log"
D0222 17:53:26.859294    2953 donation.go:31] Donating FD 5: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/config.json"
D0222 17:53:26.859303    2953 donation.go:31] Donating FD 6: "|1"
D0222 17:53:26.859311    2953 donation.go:31] Donating FD 7: "gofer IO FD"
D0222 17:53:26.859318    2953 donation.go:31] Donating FD 8: "gofer IO FD"
D0222 17:53:26.859325    2953 container.go:1178] Starting gofer: /proc/self/exe [runsc-gofer --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/log.json --log-format=json --debug-log=/var/log/runsc.log --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8]
I0222 17:53:26.862928    2953 container.go:1219] Gofer started, PID: 2972
D0222 17:53:26.863179    2953 sandbox.go:83] Attempting to create socket file "/run/containerd/runsc/k8s.io/runsc-5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b.sock"
D0222 17:53:26.863222    2953 sandbox.go:86] Using socket file "/run/containerd/runsc/k8s.io/runsc-5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b.sock"
I0222 17:53:26.863236    2953 sandbox.go:670] Control socket: ""
I0222 17:53:26.863263    2953 sandbox.go:706] Sandbox will be started in new mount, IPC and UTS namespaces
I0222 17:53:26.863274    2953 sandbox.go:716] Sandbox will be started in the current PID namespace
I0222 17:53:26.863285    2953 sandbox.go:727] Sandbox will be started in the container's network namespace: {Type:network Path:/var/run/netns/cni-b6ad74c2-e9d7-cb07-590b-e17613e8529c}
I0222 17:53:26.863365    2953 sandbox.go:776] Sandbox will be started in new user namespace
D0222 17:53:26.863396    2953 sandbox.go:1340] Changing "/dev/stdin" ownership to 65534/65534
D0222 17:53:26.863396    2953 sandbox.go:1340] Changing "/dev/stdout" ownership to 65534/65534
D0222 17:53:26.863401    2953 sandbox.go:1340] Changing "/dev/stderr" ownership to 65534/65534
D0222 17:53:26.863479    2953 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/log.json"
D0222 17:53:26.863493    2953 donation.go:31] Donating FD 4: "/var/log/runsc.log"
D0222 17:53:26.863500    2953 donation.go:31] Donating FD 5: "sandbox IO FD"
D0222 17:53:26.863507    2953 donation.go:31] Donating FD 6: "sandbox IO FD"
D0222 17:53:26.863514    2953 donation.go:31] Donating FD 7: "|0"
D0222 17:53:26.863521    2953 donation.go:31] Donating FD 8: "|1"
D0222 17:53:26.863528    2953 donation.go:31] Donating FD 9: "/var/log/pods/default_nginx-gvisor_d6e810b2-23b0-4e89-9f2a-a33ed4d89c2d/gvisor.log"
D0222 17:53:26.863536    2953 donation.go:31] Donating FD 10: "control_server_socket"
D0222 17:53:26.863543    2953 donation.go:31] Donating FD 11: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/config.json"
D0222 17:53:26.863552    2953 donation.go:31] Donating FD 12: "/dev/stdin"
D0222 17:53:26.863559    2953 donation.go:31] Donating FD 13: "/dev/stdout"
D0222 17:53:26.863566    2953 donation.go:31] Donating FD 14: "/dev/stderr"
D0222 17:53:26.863580    2953 sandbox.go:937] Starting sandbox: /proc/self/exe [runsc-sandbox --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b/log.json --log-format=json --debug-log=/var/log/runsc.log --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b --setup-root --total-memory 2036539392 --io-fds=5 --io-fds=6 --mounts-fd=7 --start-sync-fd=8 --user-log-fd=9 --controller-fd=10 --spec-fd=11 --stdio-fds=12 --stdio-fds=13 --stdio-fds=14 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b]
D0222 17:53:26.863627    2953 sandbox.go:938] SysProcAttr: &{Chroot: Credential:0xc000474780 Ptrace:false Setsid:true Setpgid:false Setctty:false Noctty:false Ctty:0 Foreground:false Pgid:0 Pdeathsig:signal 0 Cloneflags:0 Unshareflags:0 UidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappingsEnableSetgroups:false AmbientCaps:[21 18] UseCgroupFD:false CgroupFD:0}
I0222 17:53:26.863659    2953 namespace.go:123] Applying namespace network at path "/var/run/netns/cni-b6ad74c2-e9d7-cb07-590b-e17613e8529c"
I0222 17:53:26.863795    2953 namespace.go:144] Restoring namespace network
D0222 17:53:26.863885    2953 sandbox.go:1043] Destroying sandbox "5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b"
D0222 17:53:26.863914    2953 container.go:723] Destroy container, cid: 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b
D0222 17:53:26.863936    2953 container.go:977] Killing gofer for container, cid: 5639be67535564ae94c92df6f4e6327151706cb5d115c5a48c29613b09f3e52b, PID: 2972
W0222 17:53:26.864233    2953 util.go:64] FATAL ERROR: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device
W0222 17:53:26.870159    2953 main.go:261] Failure to execute command, err: 1

It's hard to find which part of code triggered `util.go:64`
kevinGC commented 1 year ago

Looks like https://cs.opensource.google/gvisor/gvisor/+/master:runsc/specutils/namespace.go;l=201 is probably where the error comes from, although it's not clear to my why it's happening.

Does this always happen? Is there a chance the machine is actually out of space, or that /tmp is full?

frezbo commented 1 year ago

Does this always happen? Is there a chance the machine is actually out of space, or that /tmp is full?

yes, this always happen. I can provide any other info if needed. Also adding in a bit more context. This is on Talos OS, where expect /var /run/container etc most paths are readonly (this is not a complete list, just to put out the idea)

/run, /tmp, /dev/shm are all tmpfs

❯ talosctl -n 10.5.0.3 mounts | grep tmpfs
10.5.0.3   devtmpfs     0.95       0.00       0.95            0.00%          /dev
10.5.0.3   tmpfs        1.02       0.00       1.02            0.06%          /run
10.5.0.3   tmpfs        1.02       0.00       1.02            0.01%          /system
10.5.0.3   tmpfs        0.07       0.00       0.07            0.00%          /tmp
10.5.0.3   tmpfs        1.02       0.00       1.02            0.00%          /dev/shm

not sure if it would cause an issue

❯ talosctl -n 10.5.0.3 read /proc/mounts | grep tmpfs
devtmpfs /dev devtmpfs rw,nosuid,relatime,size=932388k,nr_inodes=233097,mode=755 0 0
tmpfs /run tmpfs rw,nosuid,noexec,relatime,mode=755 0 0
tmpfs /system tmpfs rw,relatime,mode=755 0 0
tmpfs /tmp tmpfs rw,nosuid,nodev,noexec,relatime,size=65536k,mode=755 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev,noexec,relatime 0 0

/tmp is actually pretty small, I can try bumping the size a little more from 65536k and report back

frezbo commented 1 year ago

bumping to 500megs have to effect:

❯ talosctl -n 10.5.0.3 read /proc/mounts | grep "/tmp"
tmpfs /tmp tmpfs rw,nosuid,nodev,noexec,relatime,size=512000k,mode=755 0 0

same error

kevinGC commented 1 year ago

Something is failing in the sandbox process itself, so let's get more logs. In /etc/docker/daemon.json (or wherever you have runtimes setup) add debug flags to the runtime. When using docker, the entry looks like:

        "runsc": {
            "path": "/usr/bin/runsc",
            "runtimeArgs": [
                "--debug-log",
                "/tmp/runsc-logs/",
                "--net-raw",
                "--debug",
                "--strace",
                "--log-packets"
            ]

You can change the log path to whatever. Then running again should create a log file for each process spawned during a gVisor run. I expect one of them will have a more useful error message, most likely a *.boot file.

frezbo commented 1 year ago

I can't find a boot file being logged, this is the containerd config used:

version = 2

[plugins]
  [plugins."io.containerd.grpc.v1.cri"]
    [plugins."io.containerd.grpc.v1.cri".containerd]
      [plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
        [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
          discard_unpacked_layers = true
          runtime_type = "io.containerd.runc.v2"
        [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
          runtime_type = "io.containerd.runsc.v1"
          [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc.options]
            ConfigPath = "/etc/cri/conf.d/runsc.toml"
            TypeUrl = "io.containerd.runsc.v1.options"
    [plugins."io.containerd.grpc.v1.cri".registry]
      config_path = "/etc/cri/conf.d/hosts"
      [plugins."io.containerd.grpc.v1.cri".registry.configs]
  [plugins."io.containerd.runtime.v1.linux"]
    shim_debug = true

runsc.toml

log_path = "/var/log/shim.log"
log_level = "debug"
[runsc_config]
# See https://github.com/siderolabs/extensions/issues/4
ignore-cgroups = "true"
strace = "true"
#overlay2 = "all:memory"
debug = "true"
net-raw = "true"
debug-log = "/var/log/runsc"
log-packets = "true"

shim.log

time="2023-02-22T20:13:42.750326948Z" level=debug msg="Create shim"
time="2023-02-22T20:13:42.750352148Z" level=debug msg="***************************"
time="2023-02-22T20:13:42.750384226Z" level=debug msg="Args: [/usr/local/bin/containerd-shim-runsc-v1 -namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /bin/containerd]"
time="2023-02-22T20:13:42.750407685Z" level=debug msg="PID: 2284"
time="2023-02-22T20:13:42.750411237Z" level=debug msg="ID: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
time="2023-02-22T20:13:42.750437213Z" level=debug msg="Options: {ShimCgroup: IoUID:0 IoGID:0 BinaryName: Root: LogLevel:debug LogPath:/var/log/shim.log RunscConfig:map[debug:true debug-log:/var/log/runsc ignore-cgroups:true log-packets:true net-raw:true strace:true]}"
time="2023-02-22T20:13:42.750441520Z" level=debug msg="Bundle: /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
time="2023-02-22T20:13:42.750451041Z" level=debug msg="Terminal: false"
time="2023-02-22T20:13:42.750463458Z" level=debug msg="stdin: "
time="2023-02-22T20:13:42.750471566Z" level=debug msg="stdout: "
time="2023-02-22T20:13:42.750480569Z" level=debug msg="stderr: "
time="2023-02-22T20:13:42.750491374Z" level=debug msg="***************************"
time="2023-02-22T20:13:42.750555851Z" level=debug msg="For full process dump run: kill -12 2284"
time="2023-02-22T20:13:42.757647783Z" level=debug msg="Executing: [runsc --root=/run/containerd/runsc/k8s.io --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json --log-format=json --ignore-cgroups=true --strace=true --debug=true --net-raw=true --debug-log=/var/log/runsc --log-packets=true create --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947 --pid-file /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/init.pid --user-log /var/log/pods/default_nginx-gvisor_e5e349af-c112-433d-81da-56b0f26d56ff/gvisor.log 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947]"
time="2023-02-22T20:13:43.344020673Z" level=debug msg="Command exit code: 128, err: <nil>"
time="2023-02-22T20:13:43.348886917Z" level=debug msg="Delete, id: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947, execID: "
time="2023-02-22T20:13:43.349256093Z" level=debug msg="Shutdown, id: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"

runsc log

I0222 20:13:43.279228    2293 main.go:218] ***************************
I0222 20:13:43.282344    2293 main.go:219] Args: [runsc --root=/run/containerd/runsc/k8s.io --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json --log-format=json --ignore-cgroups=true --strace=true --debug=true --net-raw=true --debug-log=/var/log/runsc --log-packets=true create --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947 --pid-file /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/init.pid --user-log /var/log/pods/default_nginx-gvisor_e5e349af-c112-433d-81da-56b0f26d56ff/gvisor.log 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947]
I0222 20:13:43.282384    2293 main.go:220] Version VERSION_MISSING
I0222 20:13:43.282398    2293 main.go:221] GOOS: linux
I0222 20:13:43.282411    2293 main.go:222] GOARCH: amd64
I0222 20:13:43.282425    2293 main.go:223] PID: 2293
I0222 20:13:43.282439    2293 main.go:224] UID: 0, GID: 0
I0222 20:13:43.282452    2293 main.go:225] Configuration:
I0222 20:13:43.282465    2293 main.go:226]      RootDir: /run/containerd/runsc/k8s.io
I0222 20:13:43.282479    2293 main.go:227]      Platform: ptrace
I0222 20:13:43.282492    2293 main.go:228]      FileAccess: exclusive
I0222 20:13:43.282508    2293 main.go:230]      Overlay: Root=false, SubMounts=false, Medium=""
I0222 20:13:43.282522    2293 main.go:231]      Network: sandbox, logging: true
I0222 20:13:43.282537    2293 main.go:232]      Strace: true, max size: 1024, syscalls: 
I0222 20:13:43.282550    2293 main.go:233]      IOURING: false
I0222 20:13:43.282563    2293 main.go:234]      Debug: true
I0222 20:13:43.282579    2293 main.go:235]      Systemd: false
I0222 20:13:43.282592    2293 main.go:236] ***************************
D0222 20:13:43.329042    2293 specutils.go:77] Spec:
{
  "ociVersion": "1.0.2-dev",
  "process": {
    "user": {
      "uid": 65535,
      "gid": 65535,
      "additionalGids": [
        65535
      ]
    },
    "args": [
      "/pause"
    ],
    "env": [
      "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
    ],
    "cwd": "/",
    "noNewPrivileges": true,
    "oomScoreAdj": -998
  },
  "root": {
    "path": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/rootfs",
    "readonly": true
  },
  "hostname": "nginx-gvisor",
  "mounts": [
    {
      "destination": "/proc",
      "type": "proc",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/proc",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/dev",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/tmpfs",
      "options": [
        "nosuid",
        "strictatime",
        "mode=755",
        "size=65536k"
      ]
    },
    {
      "destination": "/dev/pts",
      "type": "devpts",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/devpts",
      "options": [
        "nosuid",
        "noexec",
        "newinstance",
        "ptmxmode=0666",
        "mode=0620",
        "gid=5"
      ]
    },
    {
      "destination": "/dev/mqueue",
      "type": "mqueue",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/mqueue",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/sys",
      "type": "sysfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/sysfs",
      "options": [
        "nosuid",
        "noexec",
        "nodev",
        "ro"
      ]
    },
    {
      "destination": "/dev/shm",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/shm",
      "options": [
        "ro"
      ]
    },
    {
      "destination": "/etc/resolv.conf",
      "type": "bind",
      "source": "/var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/resolv.conf",
      "options": [
        "rbind",
        "ro"
      ]
    }
  ],
  "annotations": {
    "dev.gvisor.spec.cgroup-parent": "/kubepods/besteffort/pode5e349af-c112-433d-81da-56b0f26d56ff",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.options": "rw",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.share": "pod",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/shm",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.type": "tmpfs",
    "io.kubernetes.cri.container-type": "sandbox",
    "io.kubernetes.cri.sandbox-cpu-period": "100000",
    "io.kubernetes.cri.sandbox-cpu-quota": "0",
    "io.kubernetes.cri.sandbox-cpu-shares": "2",
    "io.kubernetes.cri.sandbox-id": "01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947",
    "io.kubernetes.cri.sandbox-log-directory": "/var/log/pods/default_nginx-gvisor_e5e349af-c112-433d-81da-56b0f26d56ff",
    "io.kubernetes.cri.sandbox-memory": "0",
    "io.kubernetes.cri.sandbox-name": "nginx-gvisor",
    "io.kubernetes.cri.sandbox-namespace": "default",
    "io.kubernetes.cri.sandbox-uid": "e5e349af-c112-433d-81da-56b0f26d56ff"
  },
  "linux": {
    "resources": {
      "cpu": {
        "shares": 2
      }
    },
    "cgroupsPath": "/kubepods/besteffort/pode5e349af-c112-433d-81da-56b0f26d56ff/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947",
    "namespaces": [
      {
        "type": "pid"
      },
      {
        "type": "ipc"
      },
      {
        "type": "uts"
      },
      {
        "type": "mount"
      },
      {
        "type": "network",
        "path": "/var/run/netns/cni-943a41ee-cb19-712e-855e-bee7667f8750"
      }
    ]
  }
}
D0222 20:13:43.332064    2293 container.go:185] Create container, cid: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947, rootDir: "/run/containerd/runsc/k8s.io"
D0222 20:13:43.332166    2293 container.go:244] Creating new sandbox for container, cid: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947
D0222 20:13:43.332323    2293 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json"
D0222 20:13:43.333316    2293 donation.go:31] Donating FD 4: "/var/log/runsc"
D0222 20:13:43.333323    2293 donation.go:31] Donating FD 5: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/config.json"
D0222 20:13:43.333331    2293 donation.go:31] Donating FD 6: "|1"
D0222 20:13:43.333337    2293 donation.go:31] Donating FD 7: "gofer IO FD"
D0222 20:13:43.333342    2293 donation.go:31] Donating FD 8: "gofer IO FD"
D0222 20:13:43.333349    2293 container.go:1178] Starting gofer: /proc/self/exe [runsc-gofer --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json --log-format=json --debug-log=/var/log/runsc --net-raw=true --log-packets=true --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947 --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8]
I0222 20:13:43.334483    2293 container.go:1219] Gofer started, PID: 2322
D0222 20:13:43.334998    2293 sandbox.go:83] Attempting to create socket file "/run/containerd/runsc/k8s.io/runsc-01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947.sock"
D0222 20:13:43.335104    2293 sandbox.go:86] Using socket file "/run/containerd/runsc/k8s.io/runsc-01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947.sock"
I0222 20:13:43.335130    2293 sandbox.go:670] Control socket: ""
I0222 20:13:43.335191    2293 sandbox.go:706] Sandbox will be started in new mount, IPC and UTS namespaces
I0222 20:13:43.335220    2293 sandbox.go:716] Sandbox will be started in the current PID namespace
I0222 20:13:43.335248    2293 sandbox.go:727] Sandbox will be started in the container's network namespace: {Type:network Path:/var/run/netns/cni-943a41ee-cb19-712e-855e-bee7667f8750}
I0222 20:13:43.335440    2293 sandbox.go:776] Sandbox will be started in new user namespace
D0222 20:13:43.335478    2293 sandbox.go:1340] Changing "/dev/stdin" ownership to 65534/65534
D0222 20:13:43.335507    2293 sandbox.go:1340] Changing "/dev/stdout" ownership to 65534/65534
D0222 20:13:43.335530    2293 sandbox.go:1340] Changing "/dev/stderr" ownership to 65534/65534
D0222 20:13:43.335619    2293 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json"
D0222 20:13:43.335638    2293 donation.go:31] Donating FD 4: "/var/log/runsc"
D0222 20:13:43.335652    2293 donation.go:31] Donating FD 5: "sandbox IO FD"
D0222 20:13:43.335665    2293 donation.go:31] Donating FD 6: "sandbox IO FD"
D0222 20:13:43.335702    2293 donation.go:31] Donating FD 7: "|0"
D0222 20:13:43.335716    2293 donation.go:31] Donating FD 8: "|1"
D0222 20:13:43.335728    2293 donation.go:31] Donating FD 9: "/var/log/pods/default_nginx-gvisor_e5e349af-c112-433d-81da-56b0f26d56ff/gvisor.log"
D0222 20:13:43.335743    2293 donation.go:31] Donating FD 10: "control_server_socket"
D0222 20:13:43.335757    2293 donation.go:31] Donating FD 11: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/config.json"
D0222 20:13:43.335773    2293 donation.go:31] Donating FD 12: "/dev/stdin"
D0222 20:13:43.335786    2293 donation.go:31] Donating FD 13: "/dev/stdout"
D0222 20:13:43.335805    2293 donation.go:31] Donating FD 14: "/dev/stderr"
D0222 20:13:43.335819    2293 sandbox.go:937] Starting sandbox: /proc/self/exe [runsc-sandbox --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json --log-format=json --debug-log=/var/log/runsc --net-raw=true --log-packets=true --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947 --setup-root --total-memory 2036539392 --io-fds=5 --io-fds=6 --mounts-fd=7 --start-sync-fd=8 --user-log-fd=9 --controller-fd=10 --spec-fd=11 --stdio-fds=12 --stdio-fds=13 --stdio-fds=14 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947]
D0222 20:13:43.335860    2293 sandbox.go:938] SysProcAttr: &{Chroot: Credential:0xc000478c00 Ptrace:false Setsid:true Setpgid:false Setctty:false Noctty:false Ctty:0 Foreground:false Pgid:0 Pdeathsig:signal 0 Cloneflags:0 Unshareflags:0 UidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappingsEnableSetgroups:false AmbientCaps:[21 18] UseCgroupFD:false CgroupFD:0}
I0222 20:13:43.335949    2293 namespace.go:123] Applying namespace network at path "/var/run/netns/cni-943a41ee-cb19-712e-855e-bee7667f8750"
I0222 20:13:43.336158    2293 namespace.go:144] Restoring namespace network
D0222 20:13:43.336293    2293 sandbox.go:1043] Destroying sandbox "01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
D0222 20:13:43.336337    2293 container.go:723] Destroy container, cid: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947
D0222 20:13:43.336377    2293 container.go:977] Killing gofer for container, cid: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947, PID: 2322
W0222 20:13:43.336941    2293 util.go:64] FATAL ERROR: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device
W0222 20:13:43.341859    2293 main.go:261] Failure to execute command, err: 1

containerd log

10.5.0.3: time="2023-02-22T20:13:42.750302594Z" level=debug msg="Starting mirror log at \"/var/log/shim.log\""
10.5.0.3: time="2023-02-22T20:13:42.750326948Z" level=debug msg="Create shim"
10.5.0.3: time="2023-02-22T20:13:42.750352148Z" level=debug msg="***************************"
10.5.0.3: time="2023-02-22T20:13:42.750384226Z" level=debug msg="Args: [/usr/local/bin/containerd-shim-runsc-v1 -namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /bin/containerd]"
10.5.0.3: time="2023-02-22T20:13:42.750407685Z" level=debug msg="PID: 2284"
10.5.0.3: time="2023-02-22T20:13:42.750411237Z" level=debug msg="ID: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
10.5.0.3: time="2023-02-22T20:13:42.750437213Z" level=debug msg="Options: {ShimCgroup: IoUID:0 IoGID:0 BinaryName: Root: LogLevel:debug LogPath:/var/log/shim.log RunscConfig:map[debug:true debug-log:/var/log/runsc ignore-cgroups:true log-packets:true net-raw:true strace:true]}"
10.5.0.3: time="2023-02-22T20:13:42.750441520Z" level=debug msg="Bundle: /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
10.5.0.3: time="2023-02-22T20:13:42.750451041Z" level=debug msg="Terminal: false"
10.5.0.3: time="2023-02-22T20:13:42.750463458Z" level=debug msg="stdin: "
10.5.0.3: time="2023-02-22T20:13:42.750471566Z" level=debug msg="stdout: "
10.5.0.3: time="2023-02-22T20:13:42.750480569Z" level=debug msg="stderr: "
10.5.0.3: time="2023-02-22T20:13:42.750491374Z" level=debug msg="***************************"
10.5.0.3: time="2023-02-22T20:13:42.750555851Z" level=debug msg="For full process dump run: kill -12 2284"
10.5.0.3: time="2023-02-22T20:13:42.757647783Z" level=debug msg="Executing: [runsc --root=/run/containerd/runsc/k8s.io --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/log.json --log-format=json --ignore-cgroups=true --strace=true --debug=true --net-raw=true --debug-log=/var/log/runsc --log-packets=true create --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947 --pid-file /run/containerd/io.containerd.runtime.v2.task/k8s.io/01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947/init.pid --user-log /var/log/pods/default_nginx-gvisor_e5e349af-c112-433d-81da-56b0f26d56ff/gvisor.log 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947]"
10.5.0.3: time="2023-02-22T20:13:43.344020673Z" level=debug msg="Command exit code: 128, err: <nil>"
10.5.0.3: time="2023-02-22T20:13:43.348886917Z" level=debug msg="Delete, id: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947, execID: "
10.5.0.3: time="2023-02-22T20:13:43.349256093Z" level=debug msg="Shutdown, id: 01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947"
10.5.0.3: {"id":"01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947","level":"info","msg":"shim disconnected","time":"2023-02-22T20:13:43.351519828Z"}
10.5.0.3: {"id":"01b3a3e0e2b04b35bf2f666c89fdaebe515ce754c953e4432ba3bf40bc2bc947","level":"warning","msg":"cleaning up after shim disconnected","namespace":"k8s.io","time":"2023-02-22T20:13:43.351642732Z"}
10.5.0.3: {"level":"info","msg":"cleaning up dead shim","time":"2023-02-22T20:13:43.351669424Z"}
10.5.0.3: {"error":"failed to create containerd task: failed to create shim task: OCI runtime create failed: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device: unknown","level":"error","msg":"RunPodSandbox for \u0026PodSandboxMetadata{Name:nginx-gvisor,Uid:e5e349af-c112-433d-81da-56b0f26d56ff,Namespace:default,Attempt:0,} failed, error","time":"2023-02-22T20:13:43.411939167Z"}
frezbo commented 1 year ago

Okay, that was my bad not adding a trailing /

More logs:

runsc.log.20230222-202502.993943.create.txt

I0222 20:25:02.994000    2254 main.go:218] ***************************
I0222 20:25:02.995732    2254 main.go:219] Args: [runsc --root=/run/containerd/runsc/k8s.io --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/log.json --log-format=json --ignore-cgroups=true --strace=true --debug=true --net-raw=true --debug-log=/var/log/runsc/ --log-packets=true create --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f --pid-file /run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/init.pid --user-log /var/log/pods/default_nginx-gvisor_e3d9a4f5-578a-48b7-9d98-92dc6108ecf1/gvisor.log 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f]
I0222 20:25:02.995783    2254 main.go:220] Version VERSION_MISSING
I0222 20:25:02.995797    2254 main.go:221] GOOS: linux
I0222 20:25:02.995812    2254 main.go:222] GOARCH: amd64
I0222 20:25:02.995826    2254 main.go:223] PID: 2254
I0222 20:25:02.995842    2254 main.go:224] UID: 0, GID: 0
I0222 20:25:02.995856    2254 main.go:225] Configuration:
I0222 20:25:02.995870    2254 main.go:226]      RootDir: /run/containerd/runsc/k8s.io
I0222 20:25:02.995884    2254 main.go:227]      Platform: ptrace
I0222 20:25:02.995898    2254 main.go:228]      FileAccess: exclusive
I0222 20:25:02.995914    2254 main.go:230]      Overlay: Root=false, SubMounts=false, Medium=""
I0222 20:25:02.995930    2254 main.go:231]      Network: sandbox, logging: true
I0222 20:25:02.995945    2254 main.go:232]      Strace: true, max size: 1024, syscalls: 
I0222 20:25:02.995959    2254 main.go:233]      IOURING: false
I0222 20:25:02.995973    2254 main.go:234]      Debug: true
I0222 20:25:02.996010    2254 main.go:235]      Systemd: false
I0222 20:25:02.996025    2254 main.go:236] ***************************
D0222 20:25:03.055182    2254 specutils.go:77] Spec:
{
  "ociVersion": "1.0.2-dev",
  "process": {
    "user": {
      "uid": 65535,
      "gid": 65535,
      "additionalGids": [
        65535
      ]
    },
    "args": [
      "/pause"
    ],
    "env": [
      "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
    ],
    "cwd": "/",
    "noNewPrivileges": true,
    "oomScoreAdj": -998
  },
  "root": {
    "path": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/rootfs",
    "readonly": true
  },
  "hostname": "nginx-gvisor",
  "mounts": [
    {
      "destination": "/proc",
      "type": "proc",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/proc",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/dev",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/tmpfs",
      "options": [
        "nosuid",
        "strictatime",
        "mode=755",
        "size=65536k"
      ]
    },
    {
      "destination": "/dev/pts",
      "type": "devpts",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/devpts",
      "options": [
        "nosuid",
        "noexec",
        "newinstance",
        "ptmxmode=0666",
        "mode=0620",
        "gid=5"
      ]
    },
    {
      "destination": "/dev/mqueue",
      "type": "mqueue",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/mqueue",
      "options": [
        "nosuid",
        "noexec",
        "nodev"
      ]
    },
    {
      "destination": "/sys",
      "type": "sysfs",
      "source": "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/sysfs",
      "options": [
        "nosuid",
        "noexec",
        "nodev",
        "ro"
      ]
    },
    {
      "destination": "/dev/shm",
      "type": "tmpfs",
      "source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/shm",
      "options": [
        "ro"
      ]
    },
    {
      "destination": "/etc/resolv.conf",
      "type": "bind",
      "source": "/var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/resolv.conf",
      "options": [
        "rbind",
        "ro"
      ]
    }
  ],
  "annotations": {
    "dev.gvisor.spec.cgroup-parent": "/kubepods/besteffort/pode3d9a4f5-578a-48b7-9d98-92dc6108ecf1",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.options": "rw",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.share": "pod",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.source": "/run/containerd/io.containerd.grpc.v1.cri/sandboxes/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/shm",
    "dev.gvisor.spec.mount.gvisorinternaldevshm.type": "tmpfs",
    "io.kubernetes.cri.container-type": "sandbox",
    "io.kubernetes.cri.sandbox-cpu-period": "100000",
    "io.kubernetes.cri.sandbox-cpu-quota": "0",
    "io.kubernetes.cri.sandbox-cpu-shares": "2",
    "io.kubernetes.cri.sandbox-id": "4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f",
    "io.kubernetes.cri.sandbox-log-directory": "/var/log/pods/default_nginx-gvisor_e3d9a4f5-578a-48b7-9d98-92dc6108ecf1",
    "io.kubernetes.cri.sandbox-memory": "0",
    "io.kubernetes.cri.sandbox-name": "nginx-gvisor",
    "io.kubernetes.cri.sandbox-namespace": "default",
    "io.kubernetes.cri.sandbox-uid": "e3d9a4f5-578a-48b7-9d98-92dc6108ecf1"
  },
  "linux": {
    "resources": {
      "cpu": {
        "shares": 2
      }
    },
    "cgroupsPath": "/kubepods/besteffort/pode3d9a4f5-578a-48b7-9d98-92dc6108ecf1/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f",
    "namespaces": [
      {
        "type": "pid"
      },
      {
        "type": "ipc"
      },
      {
        "type": "uts"
      },
      {
        "type": "mount"
      },
      {
        "type": "network",
        "path": "/var/run/netns/cni-edba4696-b80e-059e-0af3-e844a7f7559d"
      }
    ]
  }
}
D0222 20:25:03.061471    2254 container.go:185] Create container, cid: 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f, rootDir: "/run/containerd/runsc/k8s.io"
D0222 20:25:03.061734    2254 container.go:244] Creating new sandbox for container, cid: 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f
D0222 20:25:03.062170    2254 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/log.json"
D0222 20:25:03.062199    2254 donation.go:31] Donating FD 4: "/var/log/runsc/runsc.log.20230222-202503.061792.gofer.txt"
D0222 20:25:03.062220    2254 donation.go:31] Donating FD 5: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/config.json"
D0222 20:25:03.062244    2254 donation.go:31] Donating FD 6: "|1"
D0222 20:25:03.062263    2254 donation.go:31] Donating FD 7: "gofer IO FD"
D0222 20:25:03.062282    2254 donation.go:31] Donating FD 8: "gofer IO FD"
D0222 20:25:03.062301    2254 container.go:1178] Starting gofer: /proc/self/exe [runsc-gofer --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/log.json --log-format=json --debug-log=/var/log/runsc/ --net-raw=true --log-packets=true --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 gofer --bundle /run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f --spec-fd=5 --mounts-fd=6 --io-fds=7 --io-fds=8]
I0222 20:25:03.069630    2254 container.go:1219] Gofer started, PID: 2267
D0222 20:25:03.069987    2254 sandbox.go:83] Attempting to create socket file "/run/containerd/runsc/k8s.io/runsc-4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f.sock"
D0222 20:25:03.070076    2254 sandbox.go:86] Using socket file "/run/containerd/runsc/k8s.io/runsc-4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f.sock"
I0222 20:25:03.070094    2254 sandbox.go:670] Control socket: ""
I0222 20:25:03.070145    2254 sandbox.go:706] Sandbox will be started in new mount, IPC and UTS namespaces
I0222 20:25:03.070166    2254 sandbox.go:716] Sandbox will be started in the current PID namespace
I0222 20:25:03.070186    2254 sandbox.go:727] Sandbox will be started in the container's network namespace: {Type:network Path:/var/run/netns/cni-edba4696-b80e-059e-0af3-e844a7f7559d}
I0222 20:25:03.070333    2254 sandbox.go:776] Sandbox will be started in new user namespace
D0222 20:25:03.070354    2254 sandbox.go:1340] Changing "/dev/stdin" ownership to 65534/65534
D0222 20:25:03.070378    2254 sandbox.go:1340] Changing "/dev/stdout" ownership to 65534/65534
D0222 20:25:03.070504    2254 sandbox.go:1340] Changing "/dev/stderr" ownership to 65534/65534
D0222 20:25:03.070582    2254 donation.go:31] Donating FD 3: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/log.json"
D0222 20:25:03.070592    2254 donation.go:31] Donating FD 4: "/var/log/runsc/runsc.log.20230222-202503.069665.boot.txt"
D0222 20:25:03.070592    2254 donation.go:31] Donating FD 5: "sandbox IO FD"
D0222 20:25:03.070592    2254 donation.go:31] Donating FD 6: "sandbox IO FD"
D0222 20:25:03.070592    2254 donation.go:31] Donating FD 7: "|0"
D0222 20:25:03.070592    2254 donation.go:31] Donating FD 8: "|1"
D0222 20:25:03.070685    2254 donation.go:31] Donating FD 9: "/var/log/pods/default_nginx-gvisor_e3d9a4f5-578a-48b7-9d98-92dc6108ecf1/gvisor.log"
D0222 20:25:03.070698    2254 donation.go:31] Donating FD 10: "control_server_socket"
D0222 20:25:03.070698    2254 donation.go:31] Donating FD 11: "/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/config.json"
D0222 20:25:03.070698    2254 donation.go:31] Donating FD 12: "/dev/stdin"
D0222 20:25:03.070698    2254 donation.go:31] Donating FD 13: "/dev/stdout"
D0222 20:25:03.070776    2254 donation.go:31] Donating FD 14: "/dev/stderr"
D0222 20:25:03.070786    2254 sandbox.go:937] Starting sandbox: /proc/self/exe [runsc-sandbox --root=/run/containerd/runsc/k8s.io --debug=true --log=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f/log.json --log-format=json --debug-log=/var/log/runsc/ --net-raw=true --log-packets=true --strace=true --ignore-cgroups=true --log-fd=3 --debug-log-fd=4 boot --bundle=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f --setup-root --total-memory 2036539392 --io-fds=5 --io-fds=6 --mounts-fd=7 --start-sync-fd=8 --user-log-fd=9 --controller-fd=10 --spec-fd=11 --stdio-fds=12 --stdio-fds=13 --stdio-fds=14 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f]
D0222 20:25:03.070786    2254 sandbox.go:938] SysProcAttr: &{Chroot: Credential:0xc000478780 Ptrace:false Setsid:true Setpgid:false Setctty:false Noctty:false Ctty:0 Foreground:false Pgid:0 Pdeathsig:signal 0 Cloneflags:0 Unshareflags:0 UidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappings:[{ContainerID:65534 HostID:65534 Size:1}] GidMappingsEnableSetgroups:false AmbientCaps:[21 18] UseCgroupFD:false CgroupFD:0}
I0222 20:25:03.070924    2254 namespace.go:123] Applying namespace network at path "/var/run/netns/cni-edba4696-b80e-059e-0af3-e844a7f7559d"
I0222 20:25:03.071100    2254 namespace.go:144] Restoring namespace network
D0222 20:25:03.071175    2254 sandbox.go:1043] Destroying sandbox "4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f"
D0222 20:25:03.071175    2254 container.go:723] Destroy container, cid: 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f
D0222 20:25:03.071255    2254 container.go:977] Killing gofer for container, cid: 4df8fb42b35e420299e0cab2ff1ef755e3c497a1406f06c09effffe26c7c768f, PID: 2267
W0222 20:25:03.071703    2254 util.go:64] FATAL ERROR: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device
W0222 20:25:03.071774    2254 main.go:261] Failure to execute command, err: 1

runsc.log.20230222-202503.061792.gofer.txt and runsc.log.20230222-202503.069665.boot.txt are completely empty

frezbo commented 1 year ago

Have a minimal reproducer using the oci quick start docs

Ran runsc through strace, but I don't see anything obvious

execve("/usr/local/bin/runsc", ["/usr/local/bin/runsc", "run", "-bundle", "/var/rootfs", "hello"], 0x7ffcb0ff6830 /* 34 vars */) = 0
arch_prctl(ARCH_SET_FS, 0x1e22bf0)      = 0
sched_getaffinity(0, 8192, [0, 1])      = 8
openat(AT_FDCWD, "/sys/kernel/mm/transparent_hugepage/hpage_pmd_size", O_RDONLY) = -1 ENOENT (No such file or directory)
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efdb0d2b000
mmap(NULL, 131072, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efdb0d0b000
mmap(NULL, 1048576, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efdb0c0b000
mmap(NULL, 8388608, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efdb040b000
mmap(NULL, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efdac40b000
mmap(NULL, 536870912, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd8c40b000
mmap(NULL, 8388608, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd8bc0b000
mmap(0xc000000000, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(NULL, 33554432, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd89c0b000
mmap(NULL, 1133584, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd89af6000
mmap(0xc000000000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(0x7efdb0d0b000, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efdb0d0b000
mmap(0x7efdb0c8b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efdb0c8b000
mmap(0x7efdb0811000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efdb0811000
mmap(0x7efdae43b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efdae43b000
mmap(0x7efd9c58b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efd9c58b000
mmap(0x7efd8bc0b000, 4222976, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efd8bc0b000
mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd899f6000
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd899e6000
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd899d6000
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=732964155}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733079304}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733181050}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733270218}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733366535}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733461281}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733560044}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733665230}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733773231}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=733887812}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=734005307}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=734123737}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=734238767}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=734328750}) = 0
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=735715022}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=735806328}) = 0
sigaltstack(NULL, {ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=0}) = 0
sigaltstack({ss_sp=0xc000008000, ss_flags=0, ss_size=32768}, NULL) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
gettid()                                = 15912
rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGHUP, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGINT, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGILL, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGTRAP, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGABRT, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGFPE, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGUSR1, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGUSR2, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPIPE, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGALRM, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGTERM, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSTKFLT, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGCHLD, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGURG, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGXCPU, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGXFSZ, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGVTALRM, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPROF, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGWINCH, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGIO, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPWR, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSYS, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_3, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_4, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_5, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_6, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_7, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_8, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_9, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_10, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_11, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_12, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_13, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_14, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_15, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_16, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_17, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_18, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_19, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_20, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_21, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_22, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_23, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_24, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_25, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_26, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_27, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_28, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_29, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_30, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_31, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_32, {sa_handler=0x46f100, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc000076000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc000066090) = 15913
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=751385785}) = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc000078000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc000066490) = 15914
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=756817435}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=757103691}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000080058, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd89996000
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=758105275}) = 0
fcntl(0, F_GETFL)                       = 0x8002 (flags O_RDWR|O_LARGEFILE)
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=758575456}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
fcntl(1, F_GETFL)                       = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(2, F_GETFL)                       = 0x8001 (flags O_WRONLY|O_LARGEFILE)
getrlimit(RLIMIT_NOFILE, {rlim_cur=1024*1024, rlim_max=1024*1024}) = 0
getpid()                                = 15912
openat(AT_FDCWD, "/proc/cpuinfo", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_create1(EPOLL_CLOEXEC)            = 4
pipe2([5, 6], O_NONBLOCK|O_CLOEXEC)     = 0
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN, data={u32=31802656, u64=31802656}}) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
read(3, "processor\t: 0\nvendor_id\t: Authen"..., 512) = 512
read(3, "cpuid extd_apicid tsc_known_freq"..., 384) = 384
read(3, "lzero xsaveerptr wbnoinvd arat n"..., 512) = 512
read(3, "epping\t: 1\nmicrocode\t: 0x8600106"..., 640) = 640
read(3, " ibpb stibp vmmcall fsgsbase tsc"..., 1024) = 518
read(3, "", 506)                        = 0
epoll_ctl(4, EPOLL_CTL_DEL, 3, 0xc0000717f4) = 0
close(3)                                = 0
mmap(0xfffffffffdfff, 512, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 0, 0) = -1 ENOMEM (Cannot allocate memory)
mmap(0x7fffffffdfff, 512, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 0, 0) = -1 EINVAL (Invalid argument)
readlinkat(AT_FDCWD, "/proc/self/exe", "/usr/local/bin/runsc", 128) = 20
openat(AT_FDCWD, "/usr/local/bin/runsc", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = -1 EPERM (Operation not permitted)
fcntl(3, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
fstat(3, {st_mode=S_IFREG|0755, st_size=40057968, ...}) = 0
pread64(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\2\0>\0\1\0\0\0\0\354F\0\0\0\0\0"..., 64, 0) = 64
pread64(3, "\213\214$\310\0\0\0H\213A(L\213\204$\360\0\0\0\17\20\204$\220\0\0\0L\213\214$\370"..., 64, 5007246) = 64
pread64(3, "\211\303H\215\5Ken\0H\213\254$\220\0\0\0H\201\304\230\0\0\0\3031\3001\333H\213\254"..., 64, 10014492) = 64
pread64(3, " %s\nName:\t%s\nNeedsCsumNot FoundN"..., 64, 15021738) = 64
pread64(3, "ushAfterChunkWriter).WriteByte\0n"..., 64, 20028984) = 64
pread64(3, "\23\0~\30\23\08\300\0\0\310\273\0\0\377\377\377\377\214$\t\0\377\377\377\377\261\333\0\0\330\0"..., 64, 25036230) = 64
pread64(3, "\233\340\300\305\263\206\200C\23(\0004=g\1084A\2\332\206i\32\222\244~\232\300\200<\375\267"..., 64, 30043476) = 64
pread64(3, "@\271T\362]r\v\327\303{w\345\234\315\215\353\251'\2030\2\346c\212\221\371\360\314;\7\25\26"..., 64, 35050722) = 64
close(3)                                = 0
rt_sigaction(SIGSEGV, NULL, {sa_handler=0x46f100, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x698fe0, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
rt_sigaction(SIGBUS, NULL, {sa_handler=0x46f100, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x698fe0, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
membarrier(MEMBARRIER_CMD_QUERY, 0)     = 0x1ff (MEMBARRIER_CMD_GLOBAL|MEMBARRIER_CMD_GLOBAL_EXPEDITED|MEMBARRIER_CMD_REGISTER_GLOBAL_EXPEDITED|MEMBARRIER_CMD_PRIVATE_EXPEDITED|MEMBARRIER_CMD_REGISTER_PRIVATE_EXPEDITED|MEMBARRIER_CMD_PRIVATE_EXPEDITED_SYNC_CORE|MEMBARRIER_CMD_REGISTER_PRIVATE_EXPEDITED_SYNC_CORE|MEMBARRIER_CMD_PRIVATE_EXPEDITED_RSEQ|MEMBARRIER_CMD_REGISTER_PRIVATE_EXPEDITED_RSEQ)
membarrier(MEMBARRIER_CMD_REGISTER_PRIVATE_EXPEDITED, 0) = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
openat(AT_FDCWD, "/proc/sys/vm/mmap_min_addr", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
fstat(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
read(3, "65536\n", 512)                 = 6
read(3, "", 506)                        = 0
epoll_ctl(4, EPOLL_CTL_DEL, 3, 0xc000071914) = 0
close(3)                                = 0
mmap(NULL, 1439992, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd89836000
getrandom("\x47\xbc\xcc\x02\x13\xbe\xb5\x9f\xf5\xaa\xae\x13\x60\xcf\x99\xf1\x16\xa7\x5c\xcd\xae\x75\x70\xb7\x71\xf8\x63\xc1\xf8\x95\x18\x36"..., 4096, 0) = 4096
getrandom("\xed\x86\xa0\x98\xae\xfe\xea\xb9\x60\xc8\x1f\xbe\xe4\x5f\x1c\x89\x71\xf5\x3a\xeb\xaa\x7f\xfd\xff\x52\xeb\x92\xab\x5c\x40\x59\x94"..., 4096, 0) = 4096
mmap(0xc000400000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000400000
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 824637915136
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=797641727}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=797762056}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
getuid()                                = 0
capget({version=0 /* _LINUX_CAPABILITY_VERSION_??? */, pid=0}, NULL) = 0
openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
read(3, "40\n", 11)                     = 3
epoll_ctl(4, EPOLL_CTL_DEL, 3, 0xc0003d7644) = 0
close(3)                                = 0
getpid()                                = 15912
getpid()                                = 15912
getpid()                                = 15912
rt_sigaction(SIGSEGV, NULL, {sa_handler=0x698fe0, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0xbde0e0, sa_mask=~[KILL STOP], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x46f240}, NULL, 8) = 0
pipe2([3, 7], 0)                        = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=901321803}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=802165670}) = 0
getpid()                                = 15912
openat(AT_FDCWD, "/etc/localtime", O_RDONLY) = 8
read(8, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114
read(8, "", 4096)                       = 0
close(8)                                = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=903353753}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=804306540}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=903735326}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=804560838}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=904090041}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=804904725}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=904341349}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=805149580}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=904546958}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=805354831}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=904752717}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=805560491}) = 0
getpid()                                = 15912
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=905039201}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=805851101}) = 0
getuid()                                = 0
getgid()                                = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=905493534}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=806319810}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=905719555}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=806561155}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=905977574}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=806785358}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=906184009}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=806993463}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=906399074}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=807212455}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=906638201}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=807463067}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=906879099}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=807702960}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=907120344}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=807944662}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=907357780}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=808180388}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=907593199}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=808416204}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=907839644}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=808718717}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=908131359}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=808952028}) = 0
openat(AT_FDCWD, "/var/rootfs/config.json", O_RDONLY|O_CLOEXEC) = 8
fcntl(8, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 8, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = -1 EPERM (Operation not permitted)
fcntl(8, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
lseek(8, 0, SEEK_SET)                   = 0
read(8, "{\n    \"ociVersion\": \"1.0.0\",\n   "..., 512) = 512
read(8, "[\n                \"CAP_AUDIT_WRI"..., 384) = 384
read(8, "_SERVICE\"\n            ]\n        "..., 512) = 512
read(8, "  \"source\": \"tmpfs\"\n        },\n "..., 640) = 640
read(8, "   }\n}\n", 1024)              = 7
read(8, "", 1017)                       = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd897f6000
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=911835819}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=812696579}) = 0
close(8)                                = 0
newfstatat(AT_FDCWD, "/var/run/runsc", {st_mode=S_IFDIR|0711, st_size=6, ...}, 0) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=912606978}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=813423453}) = 0
openat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.lock", O_RDONLY|O_CREAT|O_CLOEXEC, 0600) = 8
fcntl(8, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 8, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = -1 EPERM (Operation not permitted)
fcntl(8, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
flock(8, LOCK_EX)                       = 0
newfstatat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.state", 0xc000456b98, 0) = -1 ENOENT (No such file or directory)
statfs("/sys/fs/cgroup", {f_type=CGROUP2_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
openat(AT_FDCWD, "/sys/fs/cgroup/cgroup.controllers", O_RDONLY|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
fstat(9, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
read(9, "cpuset cpu io memory hugetlb pid"..., 512) = 34
read(9, "", 478)                        = 0
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003d6d34) = 0
close(9)                                = 0
openat(AT_FDCWD, "/sys/fs/cgroup/cgroup.subtree_control", O_WRONLY|O_TRUNC|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
write(9, "+cpuset +cpu +io +memory +hugetl"..., 39) = 39
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003d6b8c) = 0
close(9)                                = 0
mkdirat(AT_FDCWD, "/sys/fs/cgroup/hello", 0755) = -1 EEXIST (File exists)
openat(AT_FDCWD, "/proc/self/cgroup", O_RDONLY|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = -1 EPERM (Operation not permitted)
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = -1 EPERM (Operation not permitted)
fcntl(9, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(9, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 10
fcntl(10, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(10, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 10, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
statfs("/sys/fs/cgroup", {f_type=CGROUP2_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
read(9, "0::/kubepods/besteffort/podf9703"..., 4096) = 129
read(9, "", 3967)                       = 0
read(10, "19 29 0:5 / /dev rw,nosuid,relat"..., 4096) = 3293
read(10, "80 22 0:56 / /run/containerd/io."..., 4096) = 3935
read(10, "194 47 0:98 / /var/lib/kubelet/p"..., 4096) = 1367
read(10, "", 2729)                      = 0
epoll_ctl(4, EPOLL_CTL_DEL, 10, 0xc0003d6d9c) = 0
close(10)                               = 0
close(9)                                = 0
openat(AT_FDCWD, "/sys/fs/cgroup/hello/cgroup.procs", O_WRONLY|O_TRUNC|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
write(9, "0", 1)                        = 1
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=853323592}) = 0
futex(0x1e24280, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x1e24198, FUTEX_WAKE_PRIVATE, 1) = 1
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003d6d8c) = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
close(9)                                = 0
openat(AT_FDCWD, "/var/rootfs/config.json", O_RDONLY|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = -1 EPERM (Operation not permitted)
fcntl(9, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(9, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
pipe2([10, 11], O_CLOEXEC)              = 0
fcntl(10, F_GETFL)                      = 0 (flags O_RDONLY)
fcntl(10, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 10, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572952, u64=139627400398616}}) = 0
fcntl(11, F_GETFL)                      = 0x1 (flags O_WRONLY)
fcntl(11, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 11, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572712, u64=139627400398376}}) = 0
socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0, [12, 13]) = 0
fcntl(12, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(13, F_GETFL)                      = 0x2 (flags O_RDWR)
getuid()                                = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=862473837}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x1e24198, FUTEX_WAKE_PRIVATE, 1) = 1
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc000072000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc000173490) = 15915
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
openat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 14
fcntl(14, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(14, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 14, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572472, u64=139627400398136}}) = -1 EPERM (Operation not permitted)
fcntl(14, F_GETFL)                      = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(14, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572472, u64=139627400398136}}) = -1 EPERM (Operation not permitted)
fcntl(15, F_GETFL)                      = 0x8801 (flags O_WRONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(15, F_SETFL, O_WRONLY|O_LARGEFILE) = 0
openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 16
fcntl(16, F_GETFL)                      = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(16, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 16, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572472, u64=139627400398136}}) = -1 EPERM (Operation not permitted)
fcntl(16, F_GETFL)                      = 0x8801 (flags O_WRONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(16, F_SETFL, O_WRONLY|O_LARGEFILE) = 0
fcntl(11, F_GETFL)                      = 0x801 (flags O_WRONLY|O_NONBLOCK)
fcntl(11, F_SETFL, O_WRONLY)            = 0
pipe2([17, 18], O_CLOEXEC)              = 0
getpid()                                = 15912
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_VM|CLONE_VFORK|CLONE_NEWNS|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET|SIGCHLD) = 15924
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
close(18)                               = 0
read(17, "", 8)                         = 0
close(17)                               = 0
close(14)                               = 0
close(15)                               = 0
close(16)                               = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=869148066}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=968690573}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=869551174}) = 0
close(9)                                = 0
epoll_ctl(4, EPOLL_CTL_DEL, 11, 0xc0003d67c4) = 0
close(11)                               = 0
close(13)                               = 0
pipe2([9, 11], O_CLOEXEC)               = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
fcntl(9, F_GETFL)                       = 0 (flags O_RDONLY)
fcntl(9, F_SETFL, O_RDONLY|O_NONBLOCK)  = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572712, u64=139627400398376}}) = 0
fcntl(11, F_GETFL)                      = 0x1 (flags O_WRONLY)
fcntl(11, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 11, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572472, u64=139627400398136}}) = 0
socket(AF_UNIX, SOCK_STREAM, 0)         = 13
bind(13, {sa_family=AF_UNIX, sun_path="/var/run/runsc/runsc-hello.sock"}, 34) = 0
fcntl(13, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(13, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
eventfd2(0, 0)                          = 14
fcntl(14, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
write(14, "\1\0\0\0\0\0\0\0", 8)        = 8
close(14)                               = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=971740801}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=872629281}) = 0
fcntl(13, F_GETFL)                      = 0x802 (flags O_RDWR|O_NONBLOCK)
epoll_ctl(4, EPOLL_CTL_ADD, 13, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572232, u64=139627400397896}}) = 0
openat(AT_FDCWD, "/var/rootfs/config.json", O_RDONLY|O_CLOEXEC) = 14
fcntl(14, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(14, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 14, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = -1 EPERM (Operation not permitted)
fcntl(14, F_GETFL)                      = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(14, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=972814217}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=873627678}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=973024192}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=873835952}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=973226113}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=874037903}) = 0
getuid()                                = 0
getgid()                                = 0
getuid()                                = 0
getpid()                                = 15912
capget({version=_LINUX_CAPABILITY_VERSION_3, pid=15912}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
openat(AT_FDCWD, "/proc/15912/status", O_RDONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = -1 EPERM (Operation not permitted)
fcntl(15, F_GETFL)                      = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
read(15, "Name:\trunsc\nUmask:\t0022\nState:\tR"..., 4096) = 1117
read(15, "", 4096)                      = 0
close(15)                               = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102370, tv_nsec=975599263}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=876422290}) = 0
fchown(0, 65534, 65534)                 = 0
fchown(1, 65534, 65534)                 = 0
fchown(2, 65534, 65534)                 = 0
openat(AT_FDCWD, "/proc/meminfo", O_RDONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = 0
read(15, "MemTotal:        1988804 kB\nMemF"..., 4096) = 1279
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc0003d6614) = 0
close(15)                               = 0
openat(AT_FDCWD, "/sys/fs/cgroup/hello/cpuset.cpus.effective", O_RDONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = 0
fstat(15, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
read(15, "0-1\n", 512)                  = 4
read(15, "", 508)                       = 0
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc0003d650c) = 0
close(15)                               = 0
openat(AT_FDCWD, "/sys/fs/cgroup/hello/memory.max", O_RDONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = 0
fstat(15, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
read(15, "max\n", 512)                  = 4
read(15, "", 508)                       = 0
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc0003d650c) = 0
close(15)                               = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=880256714}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=880376198}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=880586710}) = 0
openat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 15
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 15, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = -1 EPERM (Operation not permitted)
fcntl(15, F_GETFL)                      = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 16
fcntl(16, F_GETFL)                      = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(16, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 16, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = -1 EPERM (Operation not permitted)
fcntl(16, F_GETFL)                      = 0x8801 (flags O_WRONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(16, F_SETFL, O_WRONLY|O_LARGEFILE) = 0
openat(AT_FDCWD, "/dev/null", O_WRONLY|O_CLOEXEC) = 17
fcntl(17, F_GETFL)                      = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(17, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 17, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308571992, u64=139627400397656}}) = -1 EPERM (Operation not permitted)
fcntl(17, F_GETFL)                      = 0x8801 (flags O_WRONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(17, F_SETFL, O_WRONLY|O_LARGEFILE) = 0
fcntl(10, F_GETFL)                      = 0x800 (flags O_RDONLY|O_NONBLOCK)
fcntl(10, F_SETFL, O_RDONLY)            = 0
fcntl(11, F_GETFL)                      = 0x801 (flags O_WRONLY|O_NONBLOCK)
fcntl(11, F_SETFL, O_WRONLY)            = 0
fcntl(13, F_GETFL)                      = 0x802 (flags O_RDWR|O_NONBLOCK)
fcntl(13, F_SETFL, O_RDWR)              = 0
pipe2([18, 19], O_CLOEXEC)              = 0
getpid()                                = 15912
pipe2([20, 21], O_CLOEXEC)              = 0
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_NEWNS|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWUSER|CLONE_NEWNET|SIGCHLD) = -1 ENOSPC (No space left on device)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
close(18)                               = 0
close(19)                               = 0
close(15)                               = 0
close(16)                               = 0
close(17)                               = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=884990794}) = 0
futex(0xc000066548, FUTEX_WAKE_PRIVATE, 1) = 1
close(12)                               = 0
epoll_ctl(4, EPOLL_CTL_DEL, 10, 0xc0003d6624) = 0
close(10)                               = 0
epoll_ctl(4, EPOLL_CTL_DEL, 13, 0xc0003d6624) = 0
close(13)                               = 0
close(14)                               = 0
epoll_ctl(4, EPOLL_CTL_DEL, 11, 0xc0003d6c7c) = 0
close(11)                               = 0
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003d6c0c) = 0
close(9)                                = 0
unlinkat(AT_FDCWD, "/var/run/runsc/runsc-hello.sock", 0) = 0
openat(AT_FDCWD, "/sys/fs/cgroup/kubepods/besteffort/podf970339d-6581-4f2d-bb6c-9386a0e80e0d/fc9ad20ae5a8c6c4acd349e30a4719546fb1ac45a45050865f59ee4985f74ba9/cgroup.procs", O_WRONLY|O_TRUNC|O_CLOEXEC) = 9
fcntl(9, F_GETFL)                       = 0x8001 (flags O_WRONLY|O_LARGEFILE)
fcntl(9, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572712, u64=139627400398376}}) = 0
write(9, "0", 1)                        = 1
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=925115163}) = 0
futex(0x1e24280, FUTEX_WAKE_PRIVATE, 1) = 1
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003d6de4) = 0
close(9)                                = 0
flock(8, LOCK_UN)                       = 0
close(8)                                = 0
openat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.lock", O_RDONLY|O_CREAT|O_CLOEXEC, 0600) = 8
fcntl(8, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 8, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=2308572712, u64=139627400398376}}) = -1 EPERM (Operation not permitted)
fcntl(8, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(8, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
flock(8, LOCK_EX)                       = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15924, si_uid=0, si_status=128, si_utime=0, si_stime=1} ---
rt_sigreturn({mask=[]})                 = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=926666757}) = 0
futex(0x1e24280, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x1e24198, FUTEX_WAKE_PRIVATE, 1) = 1
kill(15924, SIGKILL)                    = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=15912, si_uid=0} ---
rt_sigreturn({mask=[]})                 = 0
wait4(15924, [{WIFEXITED(s) && WEXITSTATUS(s) == 128}], 0, NULL) = 15924
unlinkat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.state", 0) = -1 ENOENT (No such file or directory)
unlinkat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.state", AT_REMOVEDIR) = -1 ENOENT (No such file or directory)
unlinkat(AT_FDCWD, "/var/run/runsc/hello_sandbox:hello.lock", 0) = 0
flock(8, LOCK_UN)                       = 0
close(8)                                = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102371, tv_nsec=33231515}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=934046737}) = 0
write(2, "running container: creating cont"..., 161running container: creating container: cannot create sandbox: cannot create sandbox process: starting sandbox: fork/exec /proc/self/exe: no space left on device
) = 161
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102371, tv_nsec=33697825}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=934517858}) = 0
clock_gettime(CLOCK_REALTIME, {tv_sec=1677102371, tv_nsec=33994800}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=3342, tv_nsec=934804959}) = 0
exit_group(128)                         = ?
+++ exited with 128 +++
frezbo commented 1 year ago

Apologies for the noise, this happened due to user.max_user_namespaces sysctl being set too low by default. The default was set to 0, setting this to a higher value fixed it. I think it would be nice if the gvisor docs explicitly pointed this out. Found an old issue that mentions this: #5964

I was not able to find this issue when searching with the error message.

kevinGC commented 1 year ago

Good catch. I've also sent out #8586 to make this really clear in the error itself to whoever runs into it next.