bpf: Failed to load program: Invalid argument

[fahri314]

At first start error.
Ubuntu 18.04.4 LTS
Linux debian 4.15.0-111-generic

bpf: Failed to load program: Invalid argument
0: (bf) r8 = r1
1: (b7) r9 = 0
2: (63) *(u32 *)(r10 -8) = r9
3: (18) r1 = 0xffff970338795d00
5: (bf) r2 = r10
6: (07) r2 += -8
7: (85) call bpf_map_lookup_elem#1
8: (55) if r0 != 0x0 goto pc+1
 R0=inv0 R8=ctx(id=0,off=0,imm=0) R9=inv0 R10=fp0
9: (05) goto pc+6
16: (85) call bpf_get_current_pid_tgid#14
17: (bf) r7 = r0
18: (7b) *(u64 *)(r10 -16) = r7
19: (b7) r1 = 0
20: (63) *(u32 *)(r10 -8) = r1
21: (18) r1 = 0xffff9700c8f1c800
23: (bf) r2 = r10
24: (07) r2 += -8
25: (85) call bpf_map_lookup_elem#1
26: (55) if r0 != 0x0 goto pc+1
 R0=inv0 R7=inv(id=0) R8=ctx(id=0,off=0,imm=0) R9=inv0 R10=fp0
27: (05) goto pc+164
192: (79) r1 = *(u64 *)(r8 +8)
193: (63) *(u32 *)(r10 -20) = r1
194: (18) r1 = 0xffff9700c8f1f800
196: (bf) r2 = r10
197: (07) r2 += -20
198: (85) call bpf_map_lookup_elem#1
199: (18) r9 = 0xffffffff
201: (15) if r0 == 0x0 goto pc+101
 R0=map_value(id=0,off=0,ks=4,vs=728,imm=0) R7=inv(id=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0
202: (7b) *(u64 *)(r10 -32) = r0
203: (b7) r1 = 0
204: (63) *(u32 *)(r10 -24) = r1
205: (18) r1 = 0xffff970338794a00
207: (bf) r2 = r10
208: (07) r2 += -24
209: (85) call bpf_map_lookup_elem#1
210: (bf) r7 = r0
211: (18) r9 = 0xffffffff
213: (15) if r7 == 0x0 goto pc+89
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
214: (79) r1 = *(u64 *)(r10 -16)
215: (63) *(u32 *)(r7 +0) = r1
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R1=inv(id=0) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
216: (61) r1 = *(u32 *)(r10 -20)
217: (63) *(u32 *)(r7 +4) = r1
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
218: (bf) r2 = r7
219: (07) r2 += 24
220: (bf) r1 = r8
221: (b7) r3 = 256
222: (b7) r4 = 256
223: (85) call unknown#67
invalid func unknown#67

HINT: bpf_get_stack missing (added in Linux 4.18).

root@debian:/home/user# procmon -p 10,20
bpf: Failed to load program: Invalid argument
0: (bf) r8 = r1
1: (b7) r9 = 0
2: (63) *(u32 *)(r10 -8) = r9
3: (18) r1 = 0xffff970316a0cd00
5: (bf) r2 = r10
6: (07) r2 += -8
7: (85) call bpf_map_lookup_elem#1
8: (55) if r0 != 0x0 goto pc+1
 R0=inv0 R8=ctx(id=0,off=0,imm=0) R9=inv0 R10=fp0
9: (05) goto pc+6
16: (85) call bpf_get_current_pid_tgid#14
17: (bf) r7 = r0
18: (7b) *(u64 *)(r10 -16) = r7
19: (b7) r1 = 0
20: (63) *(u32 *)(r10 -8) = r1
21: (18) r1 = 0xffff970338a38400
23: (bf) r2 = r10
24: (07) r2 += -8
25: (85) call bpf_map_lookup_elem#1
26: (55) if r0 != 0x0 goto pc+1
 R0=inv0 R7=inv(id=0) R8=ctx(id=0,off=0,imm=0) R9=inv0 R10=fp0
27: (05) goto pc+164
192: (79) r1 = *(u64 *)(r8 +8)
193: (63) *(u32 *)(r10 -20) = r1
194: (18) r1 = 0xffff970338a3a000
196: (bf) r2 = r10
197: (07) r2 += -20
198: (85) call bpf_map_lookup_elem#1
199: (18) r9 = 0xffffffff
201: (15) if r0 == 0x0 goto pc+101
 R0=map_value(id=0,off=0,ks=4,vs=728,imm=0) R7=inv(id=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0
202: (7b) *(u64 *)(r10 -32) = r0
203: (b7) r1 = 0
204: (63) *(u32 *)(r10 -24) = r1
205: (18) r1 = 0xffff970316a0db00
207: (bf) r2 = r10
208: (07) r2 += -24
209: (85) call bpf_map_lookup_elem#1
210: (bf) r7 = r0
211: (18) r9 = 0xffffffff
213: (15) if r7 == 0x0 goto pc+89
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
214: (79) r1 = *(u64 *)(r10 -16)
215: (63) *(u32 *)(r7 +0) = r1
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R1=inv(id=0) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
216: (61) r1 = *(u32 *)(r10 -20)
217: (63) *(u32 *)(r7 +4) = r1
 R0=map_value(id=0,off=0,ks=4,vs=704,imm=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R7=map_value(id=0,off=0,ks=4,vs=704,imm=0) R8=ctx(id=0,off=0,imm=0) R9=inv4294967295 R10=fp0 fp-32=map_value
218: (bf) r2 = r7
219: (07) r2 += 24
220: (bf) r1 = r8
221: (b7) r3 = 256
222: (b7) r4 = 256
223: (85) call unknown#67
invalid func unknown#67

HINT: bpf_get_stack missing (added in Linux 4.18).

[fahri314]

I guess i should upgrade my kernel version to 4.18 or upper.

[jahabibi]

Hey @fahri314 as noted in our requirements procmon requires kernel version >= 4.18. If you have any further issues after you upgrade the kernel please re-open this issue and we can investigate.