Ugh, something strange happening with that. It's a long story.
Andrei has filled bug https://bugs.launchpad.net/ubuntu/impish/+source/linux/+bug/1967924
because our patch https://kernel.ubuntu.com/git/ubuntu/ubuntu-hirsute.git/commit/?id=c9dae9237803b4ae3517f9599b33c6d4b6b9c0a4
from 2021-05-07 12:11:00 was losed
They ported this patch by themself and discovered that it leads to crash:
issue was successfully fixed and I've reviewed this solution:
For some reason fix for this patch wasn't squashed into the original commit, but instead applied on top, and then kernel release was came out without fix...
[ https://lwn.net/Articles/899420/ ]
AFAIK, right now kernels have no this problem and contains both patches.
fput(file)that doesn't needed anymore because of https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/fs/overlayfs/file.c?h=hwe-5.15-next&id=2896900e22f8212606a1837d89a6bbce314ceeda
It's not your memory fault. Bugs tend to disappear when you try to reproduce them purposefully. :D
about:configas criu does not yet support checkpoint of nested IPC namespaces
apparmor_stackingcheck to fail and print the message you mentioned above.
sudo criu check --feature apparmor_stacking || echo 'apparmor stacking not supported'
(00.339232) pie: 2565: restoring lsm profile (current) unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 (00.446113) pie: 2562: restoring lsm profile (current) unconfined_u:unconfined_r:xserver_t:s0-s0:c0.c1023 (00.447109) pie: 2562: Error (criu/pie/restorer.c:180): can't write lsm profile -13
Try setenforce 0 for a quick check to see if disabling selinux helps