On Wed, 2025-01-22 at 04:04 -0800, Eduard Zingerman wrote: [...] > @@ -23141,6 +23441,10 @@ int bpf_check(struct bpf_prog **prog, union bpf_attr *attr, bpfptr_t uattr, __u3 > if (ret) > goto skip_full_check; > > + ret = compute_live_registers(env); > + if (ret < 0) > + goto skip_full_check; > + > ret = mark_fastcall_patterns(env); > if (ret < 0) > goto skip_full_check; In an off-list discussion Alexei asked to keep this enabled only in privileged mode. [...]