{"record":{"id":"7763a4ebe7af1208","repo":"firecracker-microvm/firecracker","slug":"failed-to-set-the-requested-seccomp-filters-on-vcp","errorCode":null,"errorMessage":"Failed to set the requested seccomp filters on vCPU {}: Error: {}","messagePattern":"Failed to set the requested seccomp filters on vCPU (.+?): Error: (.+?)","errorType":"panic","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/vmm/src/vstate/vcpu.rs","lineNumber":222,"sourceCode":"        Ok(VcpuHandle::new(\n            event_sender,\n            response_receiver,\n            vcpu_fd,\n            vcpu_thread,\n        ))\n    }\n\n    /// Main loop of the vCPU thread.\n    ///\n    /// Runs the vCPU in KVM context in a loop. Handles KVM_EXITs then goes back in.\n    /// Note that the state of the VCPU and associated VM must be setup first for this to do\n    /// anything useful.\n    pub fn run(&mut self, seccomp_filter: BpfProgramRef) {\n        // Load seccomp filters for this vCPU thread.\n        // Execution panics if filters cannot be loaded, use --no-seccomp if skipping filters\n        // altogether is the desired behaviour.\n        if let Err(err) = crate::seccomp::apply_filter(seccomp_filter) {\n            panic!(\n                \"Failed to set the requested seccomp filters on vCPU {}: Error: {}\",\n                self.kvm_vcpu.index, err\n            );\n        }\n\n        // Start running the machine state in the `Paused` state.\n        let mut state = VcpuRunState::Paused;\n        loop {\n            state = match state {\n                VcpuRunState::Running => self.running(),\n                VcpuRunState::Paused => self.paused(),\n                VcpuRunState::Finished => break,\n            };\n        }\n    }\n\n    // This is the main loop of the `Running` state.\n    fn running(&mut self) -> VcpuRunState {","sourceCodeStart":204,"sourceCodeEnd":240,"githubUrl":"https://github.com/firecracker-microvm/firecracker/blob/81b38b9dad6056d7a48073e95ac5a9aed51cb2ab/src/vmm/src/vstate/vcpu.rs#L204-L240","documentation":"Error \"Failed to set the requested seccomp filters on vCPU {}: Error: {}\" thrown in firecracker-microvm/firecracker.","triggerScenarios":"Thrown at src/vmm/src/vstate/vcpu.rs:222 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify the seccomp filter built for vCPU threads is valid and only permits the syscalls vCPUs need.","Confirm the process may install seccomp filters before spawning vCPU threads."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"81b38b9dad6056d7a48073e95ac5a9aed51cb2ab","analyzedAt":"2026-08-19T05:27:02.517Z","contentChangedAt":"2026-08-19T05:27:02.517Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}