ELF � @w @ @ � � c�� c�� c�� c�� c�� c�� c�� c�� c�� c�� c�� c�� c�� � w c
�� � {
�� �� ������ ���� � � y U% � # a��� c�� � � �� ����� � � q � � y��� �� ����� � q �� ����� � aa W �� �� ����� �c � - �� ������ ���� � � � � � {�� {�� {�� {�� � � w c�� g w ]N �� ���� � � � � ya � y U= �� ���� � y y -q2 � # � {z�� a��� c�� � � �c �� ����� � q � � y��� �� ����� � q � 0 �� ����� �c � q a��� w W � c�� �� ����� � � } {
�� �� ������ ���� � � e ���� � � � � � Dual BSD/GPL error: %ld
�� $: $: �( . 2
8 @ K P @ \ � `
� f q 8 | � � @ � � � K P @ \
� ` � � � ( �
| @ � ` � � � � � K P @ \
� ` � � � � � # @ | ` � % � " K ! . " 4 " | B Q _ $ c
i m & 3 � �� ? ) K + � Q - � W . . ] @ d ` k 2 � v z � * @ � 6 � � � � � � � � @ � ` � � � 7 � � 9 � G � I � J � � � % � 5 U > W @ H Z � S = � Y [ h ; @ z \ } \ @ � ] � � n � � `! � �! � �! � �! � * " � @" � `" � a" � b" c" " �" , �" 6 �" F �" Z �" a * �" n p # | �$ | �$ � * �$ � 6 % � 6 @% � = �% � = & � 6 �& � = �& � = @' � � �' � � ( � = * � = �* � +
� @+ � �+ + �+ 1 , 7 @, = � �, J * @- P * �- W �- b . q * @. y * �. � � �. � � @1 � � �1 � � �1 � � 2 � @2 � � �2 � � 3 � � @3 � � �3 � � 4 � � @4 � � �4 � � �4 � � 5 � @5 � �5 � �5 ' * �6 1 � �6 = 7 J � @7 U � �7 c � �7 l �7 v � 8 ~ �8 � �8 � � 9 � � 9 � � @9 � � �9 � 6 : � � @: � - �: � � �: � � ; � � @; � �; � �; � < . * @< = � �< J � �< O �> ] �> j ? w � @? � � �? � �? � �? � � @ � = @@ � � �@ � � A � = @A � �A � B # C / � @C ? � �C P = �D ` k @E j � �E r � �E � � �E � # F � * @F � � �F � G � � �G � � �G � � @H � �H � �H � * �H � I
@I
* �I
* �I .
� J 4
@J G
6 �J W
� �J e
. K t
- @K }
�K �
�K �
�K �
�K >�
� L �
� N ? . * �
# @ �
@ , �
@ �
/ �
�
0 �
1 3 5 @ $ / 4 3 4 < 0 ( 8
x D � Q : V ; � _ = @ � � f j @ { � � � � � ? @ �
� C @
� D �
� D �
� * � E � � * � # @ � � * < @ < � ; " / > , > @ = 1 � B M @ V � a � j w @ � � � � � @ � @ � � � � � � @ � �
�
8
@ M
� X
� h
{
@ �
� �
� �
�
@ �
� �
A �
B �
@ 9 S @ @ & � 3 # � < # � K * T * @ a * � j F � j s | � 0 � = � * � � * � � � ! � ! 0 � H @ G ~ � �� � ; � � � � @ � � � @ @ . � � ) � 4 � ? � Q � \ K � e K � t @ | L � M � N @ � R � K S � � S � � S � � S � � | ; � M � � @ O
P Q � � � K ^ T " V
W
X Y * H $ * +
@ 5
� B
� N ( � Y = @ c = � e � ( m t m @ _ y � � * � * @ � ^ � � ^ � � ; � * � � \ � ` @ � * � � c � � = � � d @ � e � � * � g - @ h � 4 k � > l Q a Z Z b a * m ; p * � L f
� Z � i � j @ d > ^ � � � o n 0 � q t @ r
, s p ( � u � w � ~ ( � v � # @ . # ` � # � � � � v # � x K z { @ � � � y � $ . 8 | = } K h I N @ S ` _ * � f * � s o n / � y � @ � � � U = + 1 @ � � � � � � � � � � � � 0 � � � S S � � � � � � � ! � P � � � @ � `
& � @ - = � E = � T < @ = � < � �
V b f ` i � z s | = \ [ g | { � � � Y � � = � � � � � � � � * � M � � � � � � � v � � � @ y � � � � / � � w O P t N ` R � a , 8 ? E @ K � Q � W b @ n � � � Y � � � � W u T ] � � h � � @ � � ` � = � � � 0 � � � � � @ � � � � = �
� � � + = 6 = � D = T � ^ � h � r � z � � @ � . ` � 6 � � � � � � @ � � � � � � - @ � � � r � @ � / � � @ �
� � # v ) > � C � @ R � H [ X u � z � . � � q � � � � $ @ � $ ` i } � � � � � � � * � � ! � ! � ! � ! 0 � * @ � * � � � � * � � * * @ * � * � ) * @ 3 � > � Q U
� a � h � n � K � ( t � , v � - z � / | � 0 � � 4 � � 5 � � 6 � � 7 � � 8 � � � D � � = � = � � = _ ; � � @ � = � � � � = � �
@ � � � � � � - K � @ $ ` � � � 1 i � = P @ c � j � z � � �
� � �
� � �
� � i � � h @ � i � � i � � � � = � � � � � v � � = � 6 � � �
0 � m � = @ ! * � - 9 � @ ? � F @ U ` b � � � r 0 � ~ � � � � * � � � � @ � � � � � @ � � �
� � - �
@
� � � t
- @ = � # 4 ����J ����` ����w ����� � � � � � � � � h � 5 �x K $ � $ � @ � � � � � @
A B C # D 0 E ? F J G W H � I \ J a K n L � M } N � O � Q � R � S � T � U � V � W � X Y Z [ / \ : ] B ^ L _ W ` ^ a � � k $ � � � � s @ � � � $ � � � � � � $ @ � � ` � � p � $ � � $ � $ + $ < D P \ d k w � � �
� � � 6 ~ - @ � * � K � � � @ � � � � � � � @ � � � � ` � � � � � �
` � @ * � * � % 6 : @ . ` C � � M � @ X � l @ p ` 6 � @ t K v = ~ � @ ( � � � = � � � * � * @ � S � K S � � S � S � � � @ � � l � � � � = @ Y � � | 2 � 3 . 0 @
� � = � � 3 � j
� p
C
�
[ � l q @ u � ~ � � � @ � � K � � � @ � � � � � � @ � � � � � � � � � � @
� �
W �
n k � � $ . 7 @ ! L % W & b ( | # k # v # o # m x � � @ � � � * � * @ � * � � * � � * � * @ � * � � * � � * � * @ � * � � * � � * � * @ � * � � * � � * � * @ . * � � * � � * Q X � _ � � * Q @ : � * @ K ! � ! " ! $ ! , ! . ! 2 %! p 1! # 5! # 9! # @ =! # ` A! # � E! # � I! # � M! # � �
# ` # V! 1! � 5! � 9! � c! � 0 % @ g! # � m! # � M! ( x! ) � *
+ � & ' �! �! @ =! # A! # E! # @ I! # ` # # @ # 0 �! * �! * �! � 1! # 5! # 9! # @ =! # ` A! # � E! # � I! # � M! # � �! S ` �! S h �! S p �! S x �! S � �! S � � - � �! # c �! @ �! $ �! / �! 1
" @ " %" @ o 0 � S S 4 }# � � @ | � � � %
i 3 �# 5
z& 7
:
�& 9
< �& = @
A �& ? D
E �& C �& B F �& �& ; > �& 8
�& � U � �& �& � �& ' � ' "' /' =' B' O' Y' h' {' \ �' ` �' � � �' � �' �' �' �' �' | ( ( � )( � 0( � A( � Q( `( n( }( �( �( �( �( �( �( int __ARRAY_SIZE_TYPE__ pid_t __kernel_pid_t u64 __u64 unsigned long long type max_entries key value exec_start event_exec pid ppid comm filename char map_exec event_exit duration_ns exit_code unsigned int map_exit trace_event_raw_sched_process_exec ent __data_loc_filename old_pid __data trace_entry flags preempt_count unsigned short unsigned char u32 __u32 ctx handle_exec tp/sched/sched_process_exec /root/eunomia-bpf/bpf-loader-rs/bpf-loader-lib/assets/multiple_export_sample_map/multiple.bpf.c int handle_exec(struct trace_event_raw_sched_process_exec* ctx) { *p++ = value; pid = bpf_get_current_pid_tgid() >> 32; ts = bpf_ktime_get_ns(); bpf_map_update_elem(&exec_start, &pid, &ts, BPF_ANY); if (min_duration_ns) task = (struct task_struct*)bpf_get_current_task(); st.pid = pid; task_struct thread_info state stack usage ptrace on_cpu wake_entry cpu wakee_flips wakee_flip_decay_ts last_wakee recent_used_cpu wake_cpu on_rq prio static_prio normal_prio rt_priority sched_class se rt sched_task_group dl btrace_seq policy nr_cpus_allowed cpus_ptr cpus_mask sched_info tasks pushable_tasks pushable_dl_tasks mm active_mm vmacache rss_stat exit_state exit_signal pdeath_signal jobctl personality sched_reset_on_fork sched_contributes_to_load sched_migrated sched_remote_wakeup in_execve in_iowait restore_sigmask no_cgroup_migration frozen atomic_flags restart_block tgid stack_canary real_parent parent children sibling group_leader ptraced ptrace_entry thread_pid pid_links thread_group thread_node vfork_done set_child_tid clear_child_tid utime stime gtime prev_cputime nvcsw nivcsw start_time start_boottime min_flt maj_flt posix_cputimers ptracer_cred real_cred cred cached_requested_key nameidata sysvsem sysvshm fs files nsproxy signal sighand blocked real_blocked saved_sigmask pending sas_ss_sp sas_ss_size sas_ss_flags task_works audit_context loginuid sessionid seccomp parent_exec_id self_exec_id alloc_lock pi_lock wake_q pi_waiters pi_top_task pi_blocked_on journal_info bio_list plug reclaim_state backing_dev_info io_context capture_control ptrace_message last_siginfo ioac acct_rss_mem1 acct_vm_mem1 acct_timexpd mems_allowed mems_allowed_seq cpuset_mem_spread_rotor cpuset_slab_spread_rotor cgroups cg_list robust_list compat_robust_list pi_state_list pi_state_cache futex_exit_mutex futex_state perf_event_ctxp perf_event_mutex perf_event_list mempolicy il_prev pref_node_fork rseq rseq_sig rseq_event_mask tlb_ubc splice_pipe task_frag delays nr_dirtied nr_dirtied_pause dirty_paused_when timer_slack_ns default_timer_slack_ns trace trace_recursion utask pagefault_disabled oom_reaper_list stack_vm_area stack_refcount security mce_addr mce_ripv mce_whole_page __mce_reserved mce_kill_me thread status unsigned long long refcount_t refcount_struct refs atomic_t counter __call_single_node llist llist_node next u_flags a_flags sched_entity load run_node group_node sum_exec_runtime vruntime prev_sum_exec_runtime nr_migrations statistics depth cfs_rq my_q runnable_weight avg load_weight weight inv_weight rb_node __rb_parent_color rb_right rb_left list_head prev sched_statistics wait_start wait_max wait_count wait_sum iowait_count iowait_sum sleep_start sleep_max sum_sleep_runtime block_start block_max exec_max slice_max nr_migrations_cold nr_failed_migrations_affine nr_failed_migrations_running nr_failed_migrations_hot nr_forced_migrations nr_wakeups nr_wakeups_sync nr_wakeups_migrate nr_wakeups_local nr_wakeups_remote nr_wakeups_affine nr_wakeups_affine_attempts nr_wakeups_passive nr_wakeups_idle s64 __s64 long long sched_avg last_update_time load_sum runnable_sum util_sum period_contrib load_avg runnable_avg util_avg util_est enqueued ewma sched_rt_entity run_list timeout watchdog_stamp time_slice on_list back sched_dl_entity dl_runtime dl_deadline dl_period dl_bw dl_density runtime deadline dl_throttled dl_boosted dl_yielded dl_non_contending dl_overrun dl_timer inactive_timer hrtimer node _softexpires function base is_rel is_soft is_hard timerqueue_node expires ktime_t hrtimer_restart HRTIMER_NORESTART HRTIMER_RESTART u8 __u8 cpumask_t cpumask bits pcount run_delay last_arrival last_queued plist_node prio_list node_list seqnum vmas vm_area_struct vm_start vm_end vm_next vm_prev vm_rb rb_subtree_gap vm_mm vm_page_prot vm_flags shared anon_vma_chain anon_vma vm_ops vm_pgoff vm_file vm_private_data swap_readahead_info vm_policy vm_userfaultfd_ctx pgprot_t pgprot pgprotval_t rb rb_subtree_last atomic_long_t atomic64_t task_rss_stat events count fn futex nanosleep poll uaddr val bitset time uaddr2 clockid clockid_t __kernel_clockid_t timespec_type TT_NONE TT_NATIVE TT_COMPAT rmtp compat_rmtp ufds nfds has_timeout tv_sec tv_nsec hlist_node pprev lock raw_spinlock_t raw_spinlock raw_lock arch_spinlock_t qspinlock locked locked_pending tail u16 __u16 bases timers_active expiry_active posix_cputimer_base nextevt tqhead timerqueue_head rb_root rb_root_cached rb_leftmost sysv_sem undo_list sysv_shm shm_clist sigset_t sig sigpending list size_t __kernel_size_t __kernel_ulong_t kuid_t uid_t __kernel_uid32_t mode filter spinlock_t spinlock rlock wake_q_node kernel_siginfo_t task_io_accounting rchar wchar syscr syscw read_bytes write_bytes cancelled_write_bytes nodemask_t seqcount_t seqcount sequence mutex owner wait_lock osq wait_list optimistic_spin_queue perf_event_context pmu active_ctx_list pinned_groups flexible_groups event_list pinned_active flexible_active nr_events nr_active is_active nr_stat nr_freq rotate_disable rotate_necessary refcount task timestamp parent_ctx parent_gen generation pin_count task_ctx_data callback_head perf_event_groups tree index func short tlbflush_unmap_batch arch flush_required writable arch_tlbflush_unmap_batch bool _Bool rcu_users rcu page_frag page offset size thread_struct tls_array sp es ds fsindex gsindex fsbase gsbase ptrace_bps debugreg6 ptrace_dr7 cr2 trap_nr error_code io_bitmap iopl_emul addr_limit sig_on_uaccess_err fpu desc_struct limit0 base0 base1 s dpl p limit1 avl l d g base2 perf_event event_entry sibling_list active_list group_index migrate_entry hlist_entry active_entry nr_siblings event_caps group_caps pmu_private attach_state child_count total_time_enabled total_time_running tstamp shadow_ctx_time attr header_size id_header_size read_size hw child_total_time_enabled child_total_time_running child_mutex child_list oncpu owner_entry mmap_mutex mmap_count rb_entry rcu_batches rcu_pending waitq fasync pending_wakeup pending_kill pending_disable event_limit addr_filters addr_filter_ranges addr_filters_gen aux_event destroy ns id clock overflow_handler overflow_handler_context orig_overflow_handler prog tp_event sb_list perf_event_state PERF_EVENT_STATE_DEAD PERF_EVENT_STATE_EXIT PERF_EVENT_STATE_ERROR PERF_EVENT_STATE_OFF PERF_EVENT_STATE_INACTIVE PERF_EVENT_STATE_ACTIVE local64_t a local_t perf_event_attr config sample_type read_format disabled inherit pinned exclusive exclude_user exclude_kernel exclude_hv exclude_idle mmap freq inherit_stat enable_on_exec watermark precise_ip mmap_data sample_id_all exclude_host exclude_guest exclude_callchain_kernel exclude_callchain_user mmap2 comm_exec use_clockid context_switch write_backward namespaces ksymbol bpf_event aux_output cgroup __reserved_1 bp_type branch_sample_type sample_regs_user sample_stack_user sample_regs_intr aux_watermark sample_max_stack __reserved_2 aux_sample_size __reserved_3 sample_period sample_freq wakeup_events wakeup_watermark bp_addr kprobe_func uprobe_path config1 bp_len kprobe_addr probe_offset config2 __s32 hw_perf_event target prev_count last_period period_left interrupts_seq interrupts freq_time_stamp freq_count_stamp last_tag config_base event_base event_base_rdpmc idx last_cpu extra_reg branch_reg hw_perf_event_extra reg alloc tp_list pwr_acc ptsc info bp_list arch_hw_breakpoint address mask len iommu_bank iommu_cntr padding conf conf1 wait_queue_head_t wait_queue_head head irq_work llnode perf_addr_filters_head nr_file_filters perf_overflow_handler_t perf_sample_data addr raw br_stack period txn data_src ip tid_entry stream_id cpu_entry callchain aux_size regs_user regs_user_copy regs_intr stack_user_size phys_addr perf_mem_data_src mem_op mem_lvl mem_snoop mem_lock mem_dtlb mem_lvl_num mem_remote mem_snoopx mem_rsvd tid reserved perf_regs abi regs pt_regs r15 r14 r13 r12 bp bx r11 r10 r9 r8 ax cx dx si di orig_ax cs ss mm_segment_t seg avx512_timestamp fpregs_state fsave fxsave soft xsave __padding fregs_state cwd swd twd fip fcs foo fos st_space fxregs_state fop mxcsr mxcsr_mask xmm_space rip rdp padding1 sw_reserved swregs_state ftop changed lookahead no_update rm alimit entry_eip xregs_state i387 header extended_state_area xstate_header xfeatures xcomp_bv 0:57 st.ppid = BPF_CORE_READ(task, real_parent, tgid); 0:55 bpf_get_current_comm(&st.comm, sizeof(st.comm)); 0:1 fname_off = ctx->__data_loc_filename & 0xFFFF; (void*)ctx + fname_off); bpf_probe_read_str(&st.filename, sizeof(st.filename), bpf_map_update_elem(&map_exec, &ts, &st, BPF_ANY); } trace_event_raw_sched_process_template handle_exit tp/sched/sched_process_exit int handle_exit(struct trace_event_raw_sched_process_template* ctx) { id = bpf_get_current_pid_tgid(); pid = id >> 32; tid = (u32)id; if (pid != tid) start_ts = bpf_map_lookup_elem(&exec_start, &pid); if (start_ts) duration_ns = bpf_ktime_get_ns() - *start_ts; else if (min_duration_ns) bpf_map_delete_elem(&exec_start, &pid); if (min_duration_ns && duration_ns < min_duration_ns) st.duration_ns = duration_ns; 0:38 st.exit_code = (BPF_CORE_READ(task, exit_code) >> 8) & 0xff; now = bpf_ktime_get_boot_ns(); err = bpf_map_update_elem(&map_exit, &now, &st, BPF_ANY); if (err < 0) { bpf_printk("error: %ld\n", err); LICENSE min_duration_ns handle_exit.____fmt __dummy1 __dummy2 .bss .maps .rodata license __kernel_timespec blk_plug bpf_prog compat_robust_list_head completion css_set event_filter fasync_struct file files_struct fs_struct futex_pi_state hrtimer_clock_base kernel_siginfo math_emu_info mm_struct old_timespec32 perf_addr_filter_range perf_branch_stack perf_buffer perf_callchain_entry perf_raw_record pid_namespace pipe_inode_info pollfd robust_list_head rt_mutex_waiter seccomp_filter sem_undo_list sighand_struct signal_struct task_delay_info task_group trace_event_call uprobe_task vm_operations_struct vm_struct �� $ $ � � t y ' �# 6 y � � � � 7 � x � M � � � M &� � � M � � � y
� � � y � � � � � � � � � � � � � � � � � ! � ! � ! 0 � � ! 8 � 3" h � 3" x � 3" � � n" � � n" � � �" � � �" # � �
# � �
# � � � ! � D# $ ( � {# , �# , � �# 8 � 7 � ( � $
` 0 � 7$ d @ � 7$ d H � K$ h X � ^$ t h � p � r$ � � � �$ � � � �$ � � � �$ ,� � � �$ *� � � �$ � � � �$ � � � � � % � � ;% � ( � ;% � 0 � ;% *� 8 � ;% � @ � � !� P � u% � X � ! � ` � ! � � � � !� � � 3" � � � 3" � � � 3" � � � � !� � � �% � � �% � � �% 4� � �% :� ( � �% � 0 � n" � @ � n" � P � �% � X � �% � h � � !� � � & � � � >& � � � Q& � � � {# � y ( ." P ( i" � �" �# h ( ." � ( i" � ( �% ( � � � � � @ � 8 s � \ � S @ �
#
� �
p � � � � 7 (7 @7 L7
X7 p7 |7 �7 , < P ` p � � � � � � � � 0 @ P ` p � � � � � � � � ( 8 H X h x � � � � � � � � ( 8 H X h x � � � � � � � � ( 8 H X h x � � � � � � � , .text .rel.BTF.ext exec_start handle_exit.____fmt .reltp/sched/sched_process_exit map_exit handle_exit .bss .maps min_duration_ns .llvm_addrsig license .reltp/sched/sched_process_exec map_exec handle_exec .strtab .symtab .rodata .rel.BTF LICENSE LBB1_8 LBB1_6 LBB1_4 LBB1_3 __dummy2 LBB0_2 __dummy1 � v , @ � @ 8 � @ p 0 7 x � 3 @ 8p ` � X
� h m � ` h � � � c � @ �p � i < @ q �
� L�o � v � @n �