Hi Levi,
On Sat, Jan 04, 2025 at 11:02:43AM +0800, Levi Zim wrote: [...]
Hi,
I think there's some problem with this backport.
My eBPF program fails to load due to this backport with a "BPF program is too large." error. But it could successfully load on 6.13-rc5 and a kernel built directly from 41f6f64e6999 ("bpf: support non-r10 register spill/fill to/from stack in precision tracking").
Can confirm. I think it's probably because missed opportunity of state pruning without patches from the same series[1].
Given it's a regression, I'll sent a revert patch and try to figure out the rest later.
Thanks for the report!
Shung-Hsi
1: https://lore.kernel.org/all/20231205184248.1502704-1-andrii@kernel.org/
To reproduce, run ./tracexec ebpf log -- /bin/ls
Prebuilt binary: https://github.com/kxxt/tracexec/releases/download/v0.8.0/tracexec-x86_64-un... Source code: https://github.com/kxxt/tracexec/
Best regards, Levi
[...]