search

OpenCloudOS / nettrace

nettrace is a eBPF-based tool to trace network packet and diagnose network problem.
Other
341 stars 82 forks source link

failed to load kprobe-based eBPF #92

Closed wiselike closed 8 months ago

wiselike commented 8 months ago

here is my kernel:

[root@localhost nettrace]# uname -a
Linux localhost 4.18.0-147.el8.x86_64 #1 SMP Wed Dec 4 21:51:45 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

here is the error output:

[root@localhost nettrace]# ./src/nettrace -p icmp --debug
DEBUG: command: mount | grep debugfs, status:0
DEBUG: command: cat /sys/kernel/debug/tracing/events/skb/kfree_skb/format 2>/dev/null | grep NOT_SPECIFIED, status:1
DEBUG: trace name=tcp_ack_probe, prog=__trace_tcp_ack_probe is made invalid for: sock or sk mode
DEBUG: trace name=tcp_probe_timer, prog=__trace_tcp_probe_timer is made invalid for: sock or sk mode
DEBUG: trace name=tcp_send_probe0, prog=__trace_tcp_send_probe0 is made invalid for: sock or sk mode
DEBUG: trace name=__tcp_transmit_skb, prog=__trace___tcp_transmit_skb is made invalid for: sock or sk mode
DEBUG: trace name=tcp_sendmsg_locked, prog=__trace_tcp_sendmsg_locked is made invalid for: sock or sk mode
DEBUG: trace name=__tcp_push_pending_frames, prog=__trace___tcp_push_pending_frames is made invalid for: sock or sk mode
DEBUG: trace name=inet_listen, prog=__trace_inet_listen is made invalid for: sock or sk mode
DEBUG: trace name=tcp_v4_destroy_sock, prog=__trace_tcp_v4_destroy_sock is made invalid for: sock or sk mode
DEBUG: trace name=tcp_close, prog=__trace_tcp_close is made invalid for: sock or sk mode
DEBUG: trace name=tcp_send_active_reset, prog=__trace_tcp_send_active_reset is made invalid for: sock or sk mode
DEBUG: trace name=tcp_write_timer_handler, prog=__trace_tcp_write_timer_handler is made invalid for: sock or sk mode
DEBUG: trace name=tcp_retransmit_timer, prog=__trace_tcp_retransmit_timer is made invalid for: sock or sk mode
DEBUG: trace name=tcp_enter_recovery, prog=__trace_tcp_enter_recovery is made invalid for: sock or sk mode
DEBUG: trace name=tcp_enter_loss, prog=__trace_tcp_enter_loss is made invalid for: sock or sk mode
DEBUG: trace name=tcp_try_keep_open, prog=__trace_tcp_try_keep_open is made invalid for: sock or sk mode
DEBUG: trace name=tcp_enter_cwr, prog=__trace_tcp_enter_cwr is made invalid for: sock or sk mode
DEBUG: trace name=tcp_fastretrans_alert, prog=__trace_tcp_fastretrans_alert is made invalid for: sock or sk mode
DEBUG: trace name=tcp_rearm_rto, prog=__trace_tcp_rearm_rto is made invalid for: sock or sk mode
DEBUG: trace name=tcp_event_new_data_sent, prog=__trace_tcp_event_new_data_sent is made invalid for: sock or sk mode
DEBUG: trace name=tcp_schedule_loss_probe, prog=__trace_tcp_schedule_loss_probe is made invalid for: sock or sk mode
DEBUG: command: verlte() { [ "$1" = "$2" ] && echo 0 && return; [ "$1" = "$(/bin/echo -e "$1\n$2" | sort -V | head -n1)" ] && echo -1 && return; echo 1; }; [ ! $(verlte "$(uname -r)" "5.4") -eq -1 ], status:1
DEBUG: trace name=__netif_receive_skb_core, prog=__trace___netif_receive_skb_core_pskb is made invalid for: cond
DEBUG: command: verlte() { [ "$1" = "$2" ] && echo 0 && return; [ "$1" = "$(/bin/echo -e "$1\n$2" | sort -V | head -n1)" ] && echo -1 && return; echo 1; }; [ $(verlte "$(uname -r)" "5.16") -eq -1 ], status:0
DEBUG: begin to resolve kernel symbol...
kernel function netif_receive_generic_xdp not founded, skipped
DEBUG: trace name=netif_receive_generic_xdp, prog=__trace_netif_receive_generic_xdp is made invalid for: not found
kernel function cls_bpf_classify not founded, skipped
DEBUG: trace name=cls_bpf_classify, prog=__trace_cls_bpf_classify is made invalid for: not found
kernel function tcf_bpf_act not founded, skipped
DEBUG: trace name=tcf_bpf_act, prog=__trace_tcf_bpf_act is made invalid for: not found
kernel function bond_dev_queue_xmit not founded, skipped
DEBUG: trace name=bond_dev_queue_xmit, prog=__trace_bond_dev_queue_xmit is made invalid for: not found
kernel function ip_rcv_core not founded, skipped
DEBUG: trace name=ip_rcv_core, prog=__trace_ip_rcv_core is made invalid for: not found
kernel function ip6_rcv_core not founded, skipped
DEBUG: trace name=ip6_rcv_core, prog=__trace_ip6_rcv_core is made invalid for: not found
kernel function ip_finish_output_gso not founded, skipped
DEBUG: trace name=ip_finish_output_gso, prog=__trace_ip_finish_output_gso is made invalid for: not found
kernel function xfrm_output_gso not founded, skipped
DEBUG: trace name=xfrm_output_gso, prog=__trace_xfrm_output_gso is made invalid for: not found
kernel function xfrm4_transport_output not founded, skipped
DEBUG: trace name=xfrm4_transport_output, prog=__trace_xfrm4_transport_output is made invalid for: not found
kernel function xfrm4_policy_check not founded, skipped
DEBUG: trace name=xfrm4_policy_check, prog=__trace_xfrm4_policy_check is made invalid for: not found
kernel function xfrm4_transport_input not founded, skipped
DEBUG: trace name=xfrm4_transport_input, prog=__trace_xfrm4_transport_input is made invalid for: not found
kernel function ah_output not founded, skipped
DEBUG: trace name=ah_output, prog=__trace_ah_output is made invalid for: not found
kernel function esp_output not founded, skipped
DEBUG: trace name=esp_output, prog=__trace_esp_output is made invalid for: not found
kernel function esp_output_tail not founded, skipped
DEBUG: trace name=esp_output_tail, prog=__trace_esp_output_tail is made invalid for: not found
kernel function ah_input not founded, skipped
DEBUG: trace name=ah_input, prog=__trace_ah_input is made invalid for: not found
kernel function esp_input not founded, skipped
DEBUG: trace name=esp_input, prog=__trace_esp_input is made invalid for: not found
DEBUG: udp_unicast_rcv_skb.isra.56 is made manual attach
kernel function __udp_queue_rcv_skb not founded, skipped
DEBUG: trace name=__udp_queue_rcv_skb, prog=__trace___udp_queue_rcv_skb is made invalid for: not found
DEBUG: icmp_reply.constprop.33 is made manual attach
kernel function __ping_queue_rcv_skb not founded, skipped
DEBUG: trace name=__ping_queue_rcv_skb, prog=__trace___ping_queue_rcv_skb is made invalid for: not found
DEBUG: finished to resolve kernel symbol
DEBUG: kernel feature probe begin
DEBUG: kernel feature probe end
DEBUG: backup: valid prog for __netif_receive_skb_core is __trace___netif_receive_skb_core
DEBUG: backup: valid prog for ipt_do_table is __trace_ipt_do_table_legacy
DEBUG: trace name=ipt_do_table, prog=__trace_ipt_do_table is made invalid for: backup
following traces are enabled and valid:
        tracepoint: napi_gro_receive_entry, prog: __trace_napi_gro_receive_entry
        kprobe: dev_gro_receive, prog: __trace_dev_gro_receive
        kprobe: enqueue_to_backlog, prog: __trace_enqueue_to_backlog
        kprobe: xdp_do_generic_redirect, prog: __trace_xdp_do_generic_redirect
        kprobe: __netif_receive_skb_core, prog: __trace___netif_receive_skb_core
        kprobe: __dev_queue_xmit, prog: __trace___dev_queue_xmit
        kprobe: dev_hard_start_xmit, prog: __trace_dev_hard_start_xmit
        kprobe: tcf_classify, prog: __trace_tcf_classify
        kprobe: pfifo_enqueue, prog: __trace_pfifo_enqueue
        kprobe: pfifo_fast_enqueue, prog: __trace_pfifo_fast_enqueue
        kprobe: sch_direct_xmit, prog: __trace_sch_direct_xmit
        kprobe: arp_rcv, prog: __trace_arp_rcv
        kprobe: arp_process, prog: __trace_arp_process
        kprobe: packet_rcv, prog: __trace_packet_rcv
        kprobe: tpacket_rcv, prog: __trace_tpacket_rcv
        kprobe: packet_direct_xmit, prog: __trace_packet_direct_xmit
        kprobe: nft_do_chain, prog: __trace_nft_do_chain
        kprobe: nf_nat_manip_pkt, prog: __trace_nf_nat_manip_pkt
        kprobe: nf_hook_slow, prog: __trace_nf_hook_slow
        kprobe: ipt_do_table, prog: __trace_ipt_do_table_legacy
        kprobe: tcp_in_window, prog: __trace_tcp_in_window
        kprobe: ip_rcv, prog: __trace_ip_rcv
        kprobe: ip_rcv_finish, prog: __trace_ip_rcv_finish
        kprobe: ip_local_deliver, prog: __trace_ip_local_deliver
        kprobe: ip_local_deliver_finish, prog: __trace_ip_local_deliver_finish
        kprobe: ip_forward, prog: __trace_ip_forward
        kprobe: ip_forward_finish, prog: __trace_ip_forward_finish
        kprobe: ip6_forward, prog: __trace_ip6_forward
        kprobe: ip6_rcv_finish, prog: __trace_ip6_rcv_finish
        kprobe: ipv6_rcv, prog: __trace_ipv6_rcv
        kprobe: ip_output, prog: __trace_ip_output
        kprobe: ip_finish_output, prog: __trace_ip_finish_output
        kprobe: ip_finish_output2, prog: __trace_ip_finish_output2
        kprobe: ip6_output, prog: __trace_ip6_output
        kprobe: ip6_finish_output, prog: __trace_ip6_finish_output
        kprobe: ip6_finish_output2, prog: __trace_ip6_finish_output2
        kprobe: ip6_send_skb, prog: __trace_ip6_send_skb
        kprobe: ip6_local_out, prog: __trace_ip6_local_out
        kprobe: xfrm4_output, prog: __trace_xfrm4_output
        kprobe: xfrm_output, prog: __trace_xfrm_output
        kprobe: xfrm_output2, prog: __trace_xfrm_output2
        kprobe: xfrm_output_resume, prog: __trace_xfrm_output_resume
        kprobe: xfrm4_prepare_output, prog: __trace_xfrm4_prepare_output
        kprobe: xfrm4_rcv, prog: __trace_xfrm4_rcv
        kprobe: xfrm_input, prog: __trace_xfrm_input
        kprobe: fib_validate_source, prog: __trace_fib_validate_source
        kprobe: ip_route_input_slow, prog: __trace_ip_route_input_slow
        kprobe: tcp_v4_rcv, prog: __trace_tcp_v4_rcv
        kprobe: tcp_v6_rcv, prog: __trace_tcp_v6_rcv
        kprobe: tcp_filter, prog: __trace_tcp_filter
        kprobe: tcp_child_process, prog: __trace_tcp_child_process
        kprobe: tcp_v4_send_reset, prog: __trace_tcp_v4_send_reset
        kprobe: tcp_v6_send_reset, prog: __trace_tcp_v6_send_reset
        ...
DEBUG: eBPF is opened successfully
DEBUG: prog: __trace_dev_gro_receive is made no-autoload
DEBUG: prog: __trace_enqueue_to_backlog is made no-autoload
DEBUG: prog: __trace_netif_receive_generic_xdp is made no-autoload
DEBUG: prog: __trace_netif_receive_generic_xdp is made no-autoload
... ...
DEBUG: prog: __trace_tcp_schedule_loss_probe is made no-autoload
DEBUG: prog: __trace___kfree_skb is made no-autoload
libbpf: prog '__trace_napi_gro_receive_entry': BPF program load failed: Permission denied
libbpf: prog '__trace_napi_gro_receive_entry': -- BEGIN PROG LOAD LOG --
; DEFINE_ALL_PROBES(KPROBE_DEFAULT, TP_DEFAULT, FNC)
0: (7b) *(u64 *)(r10 -224) = r1
1: (79) r7 = *(u64 *)(r1 +24)
2: (b7) r8 = 0
3: (7b) *(u64 *)(r10 -208) = r8
4: (7b) *(u64 *)(r10 -216) = r7
; DEFINE_ALL_PROBES(KPROBE_DEFAULT, TP_DEFAULT, FNC)
5: (63) *(u32 *)(r10 -168) = r8
6: (bf) r2 = r10
;
7: (07) r2 += -168
; DEFINE_ALL_PROBES(KPROBE_DEFAULT, TP_DEFAULT, FNC)
8: (18) r1 = 0xffff889a3a7c2e00
10: (85) call bpf_map_lookup_elem#1
11: (bf) r6 = r0
12: (15) if r6 == 0x0 goto pc+2131
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-168=????mmmm fp-208=00000000 fp-216=mmmmmmmm fp-224=ctx
; DEFINE_ALL_PROBES(KPROBE_DEFAULT, TP_DEFAULT, FNC)
13: (7b) *(u64 *)(r10 -192) = r8
14: (7b) *(u64 *)(r10 -184) = r8
15: (b7) r1 = 1
16: (6b) *(u16 *)(r10 -176) = r1
17: (7b) *(u64 *)(r10 -200) = r6
; if (ctx->args->detail) {
18: (71) r1 = *(u8 *)(r6 +129)
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1_w=inv1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-168=????mmmm fp-176=??????mm fp-184_w=00000000 fp-192_w=00000000 fp-200_w=map_value fp-208=00000000 fp-216=mmmmmmmm fp-224=ctx
; if (ctx->args->detail) {
19: (15) if r1 == 0x0 goto pc+189
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-168=????mmmm fp-176=??????mm fp-184=00000000 fp-192=00000000 fp-200=map_value fp-208=00000000 fp-216=mmmmmmmm fp-224=ctx
20: (b7) r1 = 0
; detail_event_t e = { };
21: (7b) *(u64 *)(r10 -24) = r1
22: (7b) *(u64 *)(r10 -32) = r1
23: (7b) *(u64 *)(r10 -40) = r1
24: (7b) *(u64 *)(r10 -48) = r1
25: (7b) *(u64 *)(r10 -56) = r1
26: (7b) *(u64 *)(r10 -64) = r1
27: (7b) *(u64 *)(r10 -72) = r1
28: (7b) *(u64 *)(r10 -80) = r1
29: (7b) *(u64 *)(r10 -88) = r1
30: (7b) *(u64 *)(r10 -96) = r1
31: (7b) *(u64 *)(r10 -104) = r1
32: (7b) *(u64 *)(r10 -112) = r1
33: (7b) *(u64 *)(r10 -120) = r1
34: (7b) *(u64 *)(r10 -128) = r1
35: (7b) *(u64 *)(r10 -136) = r1
36: (7b) *(u64 *)(r10 -144) = r1
37: (7b) *(u64 *)(r10 -152) = r1
38: (7b) *(u64 *)(r10 -160) = r1
39: (7b) *(u64 *)(r10 -168) = r1
40: (b7) r1 = 152
; ctx_event(ctx, e);
41: (7b) *(u64 *)(r10 -184) = r1
42: (bf) r1 = r10
; detail_event_t e = { };
43: (07) r1 += -168
; ctx_event(ctx, e);
44: (7b) *(u64 *)(r10 -208) = r1
; struct sk_buff *skb = ctx->skb;
45: (7b) *(u64 *)(r10 -16) = r7
; if (!args->ready)
46: (71) r1 = *(u8 *)(r6 +131)
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1_w=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16_w=mmmmmmmm fp-24_w=00000000 fp-32_w=00000000 fp-40_w=00000000 fp-48_w=00000000 fp-56_w=00000000 fp-64_w=00000000 fp-72_w=00000000 fp-80_w=00000000 fp-88_w=00000000 fp-96_w=00000000 fp-104_w=00000000 fp-112_w=00000000 fp-120_w=00000000 fp-128_w=00000000 fp-136_w=00000000 fp-144_w=00000000 fp-152_w=00000000 fp-160_w=00000000 fp-168_w=00000000 fp-176=??????mm fp-184_w=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208_w=fp fp-216=mmmmmmmm fp-224=ctx
; if (!args->ready)
47: (15) if r1 == 0x0 goto pc+2084
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx
; skip_life = (args->trace_mode & MODE_SKIP_LIFE_MASK) ||
48: (61) r1 = *(u32 *)(r6 +108)
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx
; skip_life = (args->trace_mode & MODE_SKIP_LIFE_MASK) ||
49: (57) r1 &= 51
; skip_life = (args->trace_mode & MODE_SKIP_LIFE_MASK) ||
50: (15) if r1 == 0x0 goto pc+341
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R1=inv(id=0,umax_value=51,var_off=(0x0; 0x33)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx
; pid = (u32)bpf_get_current_pid_tgid();
51: (85) call bpf_get_current_pid_tgid#14
52: (7b) *(u64 *)(r10 -232) = r0
53: (b7) r2 = 1
54: (bf) r3 = r10
55: (07) r3 += -168
56: (7b) *(u64 *)(r10 -248) = r3
57: (7b) *(u64 *)(r10 -240) = r2
; if (ARGS_CHECK(args, pid, pid) || filter_by_netns(ctx))
58: (71) r1 = *(u8 *)(r6 +120)
 R0=inv(id=0) R2=inv1 R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240_w=mmmmmmmm fp-248_w=fp
59: (15) if r1 == 0x0 goto pc+5
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv1 R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
60: (61) r1 = *(u32 *)(r6 +116)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv1 R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
61: (79) r2 = *(u64 *)(r10 -232)
62: (67) r2 <<= 32
63: (77) r2 >>= 32
; if (ARGS_CHECK(args, pid, pid) || filter_by_netns(ctx))
64: (5d) if r1 != r2 goto pc+2067
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (args->trace_mode == TRACE_MODE_SOCK_MASK) {
65: (61) r1 = *(u32 *)(r6 +108)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (args->trace_mode == TRACE_MODE_SOCK_MASK) {
66: (55) if r1 != 0x10 goto pc+395
 R0=inv(id=0) R1=inv16 R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=fp-168,call_-1 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R10=fp0,call_-1 fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (probe_parse_sk(ctx->sk, &e->ske))
67: (79) r8 = *(u64 *)(r10 -192)
68: (b7) r1 = 0
; .args = (void *)CONFIG(),
69: (63) *(u32 *)(r10 -8) = r1
70: (bf) r2 = r10
; if (probe_parse_sk(ctx->sk, &e->ske))
71: (07) r2 += -8
; .args = (void *)CONFIG(),
72: (18) r1 = 0xffff889a3a7c2e00
74: (85) call bpf_map_lookup_elem#1
75: (bf) r9 = r0
76: (15) if r9 == 0x0 goto pc+1715
 R0=map_value(id=0,off=0,ks=4,vs=168,imm=0) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv(id=0) R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; switch (_C(skc, skc_family)) {
77: (bf) r3 = r8
78: (07) r3 += 16
79: (bf) r1 = r10
;
80: (07) r1 += -8
; switch (_C(skc, skc_family)) {
81: (b7) r2 = 2
82: (85) call bpf_probe_read#4
83: (b7) r7 = 34525
84: (69) r1 = *(u16 *)(r10 -8)
; switch (_C(skc, skc_family)) {
85: (15) if r1 == 0xa goto pc+33
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
86: (55) if r1 != 0x2 goto pc+2045
 R0=inv(id=0) R1=inv2 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=00000000 fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; ske->l3.ipv4.saddr = _C(skc, skc_rcv_saddr);
87: (bf) r3 = r8
88: (07) r3 += 4
89: (bf) r1 = r10
;
90: (07) r1 += -8
; ske->l3.ipv4.saddr = _C(skc, skc_rcv_saddr);
91: (b7) r2 = 4
92: (85) call bpf_probe_read#4
93: (61) r1 = *(u32 *)(r10 -8)
; ske->l3.ipv4.saddr = _C(skc, skc_rcv_saddr);
94: (63) *(u32 *)(r10 -160) = r1
95: (bf) r1 = r10
;
96: (07) r1 += -8
; ske->l3.ipv4.daddr = _C(skc, skc_daddr);
97: (b7) r2 = 4
98: (bf) r3 = r8
99: (85) call bpf_probe_read#4
100: (61) r1 = *(u32 *)(r10 -8)
; ske->l3.ipv4.daddr = _C(skc, skc_daddr);
101: (63) *(u32 *)(r10 -156) = r1
; if (FILTER_ITER_CHECK(ctx, addr, ske->l3.ipv4.saddr,
102: (71) r2 = *(u8 *)(r9 +20)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
103: (15) if r2 == 0x0 goto pc+5
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
104: (61) r2 = *(u32 *)(r9 +16)
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
105: (bf) r3 = r1
106: (1d) if r2 == r3 goto pc+2
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
107: (61) r3 = *(u32 *)(r10 -160)
108: (5d) if r2 != r3 goto pc+2023
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
109: (71) r2 = *(u8 *)(r9 +4)
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2_w=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
110: (15) if r2 == 0x0 goto pc+3
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
111: (61) r2 = *(u32 *)(r9 +0)
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
112: (61) r3 = *(u32 *)(r10 -160)
113: (5d) if r2 != r3 goto pc+2018
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv34525 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
114: (b7) r7 = 2048
115: (71) r2 = *(u8 *)(r9 +12)
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2_w=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7_w=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
116: (15) if r2 == 0x0 goto pc+2
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
117: (61) r2 = *(u32 *)(r9 +8)
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (FILTER_ITER_CHECK(ctx, addr, ske->l3.ipv4.saddr,
118: (5d) if r2 != r1 goto pc+2013
 R0=inv(id=0) R1=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (FILTER_CHECK(ctx, l3_proto, l3_proto))
119: (71) r1 = *(u8 *)(r9 +102)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
120: (15) if r1 == 0x0 goto pc+2
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
121: (69) r1 = *(u16 *)(r9 +100)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; if (FILTER_CHECK(ctx, l3_proto, l3_proto))
122: (5d) if r1 != r7 goto pc+2009
 R0=inv(id=0) R1=inv2048 R2=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R3=inv(id=0,umax_value=4294967295,var_off=(0x0; 0xffffffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=fp
; u32 flags = _(((u32 *)(&sk->__sk_flags_offset))[0]);
123: (bf) r3 = r8
124: (07) r3 += 536
125: (bf) r1 = r10
;
126: (07) r1 += -8
; u32 flags = _(((u32 *)(&sk->__sk_flags_offset))[0]);
127: (b7) r2 = 4
128: (85) call bpf_probe_read#4
129: (61) r1 = *(u32 *)(r10 -8)
; l4_proto = (flags << 16) >> 24;
130: (77) r1 >>= 8
; l4_proto = (flags << 16) >> 24;
131: (bf) r2 = r1
132: (57) r2 &= 255
133: (b7) r3 = 6
; if (l4_proto == IPPROTO_IP)
134: (7b) *(u64 *)(r10 -248) = r3
135: (15) if r2 == 0x0 goto pc+1
 R0=inv(id=0) R1=inv(id=0,umax_value=16777215,var_off=(0x0; 0xffffff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
136: (7b) *(u64 *)(r10 -248) = r1
; if (FILTER_CHECK(ctx, l4_proto, l4_proto))
137: (71) r1 = *(u8 *)(r9 +104)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=16777215,var_off=(0x0; 0xffffff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
138: (15) if r1 == 0x0 goto pc+4
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
139: (79) r1 = *(u64 *)(r10 -248)
140: (57) r1 &= 255
141: (71) r2 = *(u8 *)(r9 +103)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (FILTER_CHECK(ctx, l4_proto, l4_proto))
142: (5d) if r2 != r1 goto pc+1989
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; switch (l4_proto) {
143: (79) r1 = *(u64 *)(r10 -248)
144: (57) r1 &= 255
145: (15) if r1 == 0x11 goto pc+1
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
146: (55) if r1 != 0x6 goto pc+17
 R0=inv(id=0) R1=inv6 R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv6 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=00000000 fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; ske->l4.min.sport = bpf_htons(_C(skc, skc_num));
147: (bf) r3 = r8
148: (07) r3 += 14
149: (bf) r1 = r10
;
150: (07) r1 += -8
; ske->l4.min.sport = bpf_htons(_C(skc, skc_num));
151: (b7) r2 = 2
152: (85) call bpf_probe_read#4
153: (69) r1 = *(u16 *)(r10 -8)
; ske->l4.min.sport = bpf_htons(_C(skc, skc_num));
154: (dc) r1 = be16 r1
; ske->l4.min.sport = bpf_htons(_C(skc, skc_num));
155: (6b) *(u16 *)(r10 -128) = r1
; ske->l4.min.sport = bpf_htons(_C(skc, skc_num));
156: (bf) r3 = r8
157: (07) r3 += 12
158: (bf) r1 = r10
;
159: (07) r1 += -8
; ske->l4.min.dport = _C(skc, skc_dport);
160: (b7) r2 = 2
161: (85) call bpf_probe_read#4
162: (69) r1 = *(u16 *)(r10 -8)
; ske->l4.min.dport = _C(skc, skc_dport);
163: (6b) *(u16 *)(r10 -126) = r1
; if (FILTER_ITER_CHECK(ctx, port, ske->l4.tcp.sport,
164: (71) r1 = *(u8 *)(r9 +98)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
165: (15) if r1 == 0x0 goto pc+5
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
166: (69) r1 = *(u16 *)(r9 +96)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
167: (69) r2 = *(u16 *)(r10 -126)
168: (1d) if r1 == r2 goto pc+2
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
169: (69) r2 = *(u16 *)(r10 -128)
170: (5d) if r1 != r2 goto pc+1961
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
171: (71) r1 = *(u8 *)(r9 +90)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
172: (15) if r1 == 0x0 goto pc+3
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
173: (69) r1 = *(u16 *)(r9 +88)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
174: (69) r2 = *(u16 *)(r10 -128)
175: (5d) if r1 != r2 goto pc+1956
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
176: (71) r1 = *(u8 *)(r9 +94)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
177: (15) if r1 == 0x0 goto pc+3
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
178: (69) r1 = *(u16 *)(r9 +92)
 R0=inv(id=0) R1_w=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
179: (69) r2 = *(u16 *)(r10 -126)
; if (FILTER_ITER_CHECK(ctx, port, ske->l4.tcp.sport,
180: (5d) if r1 != r2 goto pc+1951
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv2048 R8=inv0 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=00000000 fp-104=00000000 fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; ske->rqlen = _C(sk, sk_receive_queue.qlen);
181: (bf) r3 = r8
182: (07) r3 += 216
183: (bf) r1 = r10
;
184: (07) r1 += -8
; ske->rqlen = _C(sk, sk_receive_queue.qlen);
185: (b7) r2 = 4
186: (85) call bpf_probe_read#4
187: (61) r1 = *(u32 *)(r10 -8)
; ske->rqlen = _C(sk, sk_receive_queue.qlen);
188: (63) *(u32 *)(r10 -100) = r1
; ske->wqlen = _C(sk, sk_write_queue.qlen);
189: (bf) r3 = r8
190: (07) r3 += 360
191: (bf) r1 = r10
;
192: (07) r1 += -8
; ske->wqlen = _C(sk, sk_write_queue.qlen);
193: (b7) r2 = 4
194: (85) call bpf_probe_read#4
; ske->proto_l4 = l4_proto;
195: (79) r1 = *(u64 *)(r10 -248)
196: (73) *(u8 *)(r10 -94) = r1
; ske->proto_l3 = l3_proto;
197: (6b) *(u16 *)(r10 -96) = r7
; ske->wqlen = _C(sk, sk_write_queue.qlen);
198: (61) r1 = *(u32 *)(r10 -8)
; ske->wqlen = _C(sk, sk_write_queue.qlen);
199: (63) *(u32 *)(r10 -104) = r1
; ske->state = _C(skc, skc_state);
200: (07) r8 += 18
201: (bf) r1 = r10
;
202: (07) r1 += -8
; ske->state = _C(skc, skc_state);
203: (b7) r2 = 1
204: (bf) r3 = r8
205: (85) call bpf_probe_read#4
206: (71) r1 = *(u8 *)(r10 -8)
; ske->state = _C(skc, skc_state);
207: (73) *(u8 *)(r10 -92) = r1
208: (05) goto pc+1583
; if (FILTER_ENABLED(ctx, l4_proto))
1792: (b7) r7 = 1
; if (!skip_life) {
1793: (79) r1 = *(u64 *)(r10 -240)
1794: (55) if r1 != 0x0 goto pc+11
 R0=inv(id=0) R1=inv0 R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv1 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
1795: (b7) r1 = 1
; bool _matched = true;
1796: (73) *(u8 *)(r10 -8) = r1
1797: (bf) r2 = r10
;
1798: (07) r2 += -16
1799: (bf) r3 = r10
1800: (07) r3 += -8
1801: (b7) r7 = 0
; bpf_map_update_elem(&m_matched, &skb, &_matched, 0);
1802: (18) r1 = 0xffff889a2de1c800
1804: (b7) r4 = 0
1805: (85) call bpf_map_update_elem#2
; if (!args->detail)
1806: (71) r1 = *(u8 *)(r6 +129)
 R0=inv(id=0) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (!args->detail)
1807: (15) if r1 == 0x0 goto pc+33
 R0=inv(id=0) R1=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=map_value(id=0,off=0,ks=4,vs=168,imm=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=????mmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=00000000 fp-56=00000000 fp-64=00000000 fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; struct net_device *dev = _C(skb, dev);
1808: (79) r3 = *(u64 *)(r10 -16)
1809: (07) r3 += 16
1810: (bf) r1 = r10
1811: (07) r1 += -8
1812: (b7) r2 = 8
1813: (85) call bpf_probe_read#4
1814: (79) r6 = *(u64 *)(r10 -8)
; bpf_get_current_comm(detail->task, sizeof(detail->task));
1815: (bf) r1 = r10
1816: (07) r1 += -60
; bpf_get_current_comm(detail->task, sizeof(detail->task));
1817: (b7) r2 = 16
1818: (85) call bpf_get_current_comm#16
; detail->pid = pid;
1819: (79) r1 = *(u64 *)(r10 -232)
1820: (63) *(u32 *)(r10 -64) = r1
; if (dev) {
1821: (15) if r6 == 0x0 goto pc+11
 R0=inv(id=0) R1=inv(id=0) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=00000000 fp-40=00000000 fp-48=0000mmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; bpf_probe_read_str(detail->ifname, sizeof(detail->ifname) - 1,
1822: (bf) r1 = r10
1823: (07) r1 += -44
; bpf_probe_read_str(detail->ifname, sizeof(detail->ifname) - 1,
1824: (b7) r2 = 15
1825: (bf) r3 = r6
1826: (85) call bpf_probe_read_str#45
; detail->ifindex = _C(dev, ifindex);
1827: (07) r6 += 264
1828: (bf) r1 = r10
; bpf_probe_read_str(detail->ifname, sizeof(detail->ifname) - 1,
1829: (07) r1 += -8
; detail->ifindex = _C(dev, ifindex);
1830: (b7) r2 = 4
1831: (bf) r3 = r6
1832: (05) goto pc+5
;
1838: (85) call bpf_probe_read#4
1839: (61) r1 = *(u32 *)(r10 -8)
1840: (63) *(u32 *)(r10 -28) = r1
; if (!ctx->args->stack)
1841: (79) r1 = *(u64 *)(r10 -200)
; if (!ctx->args->stack)
1842: (71) r2 = *(u8 *)(r1 +132)
 R0=inv(id=0) R1_w=map_value(id=0,off=0,ks=4,vs=168,imm=0) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (!ctx->args->stack)
1843: (15) if r2 == 0x0 goto pc+57
 R0=inv(id=0) R1=map_value(id=0,off=0,ks=4,vs=168,imm=0) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (!funcs[i])
1844: (69) r3 = *(u16 *)(r1 +134)
 R0=inv(id=0) R1=map_value(id=0,off=0,ks=4,vs=168,imm=0) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (!funcs[i])
1845: (15) if r3 == 0x0 goto pc+55
 R0=inv(id=0) R1=map_value(id=0,off=0,ks=4,vs=168,imm=0) R2=inv(id=0,umax_value=255,var_off=(0x0; 0xff)) R3=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; if (funcs[i] == ctx->func)
1846: (69) r2 = *(u16 *)(r10 -176)
; if (funcs[i] == ctx->func)
1847: (5d) if r3 != r2 goto pc+8
 R0=inv(id=0) R1=map_value(id=0,off=0,ks=4,vs=168,imm=0) R2=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R3=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=00000000 fp-80=00000000 fp-88=00000000 fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=00000000 fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; key = bpf_get_stackid(ctx->regs, &m_stack, 0);
1848: (79) r1 = *(u64 *)(r10 -224)
; key = bpf_get_stackid(ctx->regs, &m_stack, 0);
1849: (18) r2 = 0xffffab04012d5000
1851: (b7) r3 = 0
1852: (85) call bpf_get_stackid#27
; ctx->e->stack_id = key;
1853: (79) r1 = *(u64 *)(r10 -208)
; ctx->e->stack_id = key;
1854: (63) *(u32 *)(r1 +100) = r0
1855: (05) goto pc+45
; pkt->ts = bpf_ktime_get_ns();
1901: (85) call bpf_ktime_get_ns#5
; pkt->ts = bpf_ktime_get_ns();
1902: (7b) *(u64 *)(r10 -168) = r0
; e->key = (u64)(void *)skb;
1903: (79) r1 = *(u64 *)(r10 -16)
; e->key = (u64)(void *)skb;
1904: (7b) *(u64 *)(r10 -88) = r1
; e->func = ctx->func;
1905: (69) r1 = *(u16 *)(r10 -176)
; e->func = ctx->func;
1906: (63) *(u32 *)(r10 -72) = r1
; if (ctx->size)
1907: (79) r5 = *(u64 *)(r10 -184)
; if (ctx->size)
1908: (15) if r5 == 0x0 goto pc+7
 R0=inv(id=0) R1=inv(id=0,umax_value=65535,var_off=(0x0; 0xffff)) R5=inv(id=0) R6=inv(id=0) R7=inv0 R8=inv18 R9=map_value(id=0,off=0,ks=4,vs=168,imm=0) R10=fp0,call_-1 fp-8=mmmmmmmm fp-16=mmmmmmmm fp-24=00000000 fp-32=mmmm0mmm fp-40=mmmmmmmm fp-48=mmmmmmmm fp-56=mmmmmmmm fp-64=mmmmmmmm fp-72=mmmmmmmm fp-80=00000000 fp-88=mmmmmmmm fp-96=000m0mmm fp-104=mmmmmmmm fp-112=00000000 fp-120=00000000 fp-128=0000mmmm fp-136=00000000 fp-144=00000000 fp-152=00000000 fp-160=mmmmmmmm fp-168=mmmmmmmm fp-176=??????mm fp-184=mmmmmmmm fp-192=00000000 fp-200=map_value fp-208=fp fp-216=mmmmmmmm fp-224=ctx fp-232=mmmmmmmm fp-240=mmmmmmmm fp-248=mmmmmmmm
; EVENT_OUTPUT_PTR(ctx->regs, ctx->e, ctx->size);
1909: (79) r4 = *(u64 *)(r10 -208)
1910: (79) r1 = *(u64 *)(r10 -224)
1911: (18) r2 = 0xffff889a2210a600
1913: (18) r3 = 0xffffffff
1915: (85) call bpf_perf_event_output#25
R5 min value is negative, either use unsigned or 'var &= const'
-- END PROG LOAD LOG --
libbpf: prog '__trace_napi_gro_receive_entry': failed to load: -13
libbpf: failed to load object 'kprobe'
libbpf: failed to load BPF skeleton 'kprobe': -13
ERROR: failed to load kprobe-based eBPF
ERROR: failed to load kprobe-based bpf

I build the tool in the docker with newest image, and here is the command:

docker run -it --rm --network=host --privileged -v /root/wh/nettrace:/root/nettrace -v /lib/modules/:/lib/modules/ -v /usr/src/:/usr/src/ imagedong/nettrace-build make -C /root/nettrace/ COMPAT=1 all
menglongdong commented 8 months ago

Are you using the master branch? You can recompile the lastest master branch, and let's see if this error happens.

menglongdong commented 8 months ago

The reason of this error is that the compiler didn't optimize the ctx->size as a const, and the 4.X kernel can't spill it to the stack.

The lastest master pass the size by function args, instead of stack, which I think can make the compiler optimize it to a const and solve this problem.

menglongdong commented 8 months ago

最新的版本应该解决了这个问题