Hi Levi,
On Sat, Jan 04, 2025 at 11:02:43AM +0800, Levi Zim wrote:
[...]
> Hi,
>
> I think there's some problem with this backport.
>
> My eBPF program fails to load due to this backport with a "BPF program is
> too large." error. But it could successfully load on 6.13-rc5 and a kernel
> built directly from 41f6f64e6999 ("bpf: support non-r10 register spill/fill
> to/from stack in precision tracking").
Can confirm. I think it's probably because missed opportunity of state
pruning without patches from the same series[1].
Given it's a regression, I'll sent a revert patch and try to figure out
the rest later.
Thanks for the report!
Shung-Hsi
1: https://lore.kernel.org/all/20231205184248.1502704-1-andrii@xxxxxxxxxx/
> To reproduce, run ./tracexec ebpf log -- /bin/ls
>
> Prebuilt binary: https://github.com/kxxt/tracexec/releases/download/v0.8.0/tracexec-x86_64-unknown-linux-gnu-static.tar.gz
> Source code: https://github.com/kxxt/tracexec/
>
> Best regards,
> Levi
[...]
